Skip to content

crypto: use names for asymmetric key algorithms - #65966

Merged
nodejs-github-bot merged 1 commit into
nodejs:mainfrom
panva:nid-cleanup
Sep 17, 2026
Merged

crypto: use names for asymmetric key algorithms#65966
nodejs-github-bot merged 1 commit into
nodejs:mainfrom
panva:nid-cleanup

Conversation

@panva

@panva panva commented Sep 10, 2026

Copy link
Copy Markdown
Member

Provider-backed keys can have no numeric OpenSSL ID. Identify and construct asymmetric keys by algorithm name, replacing the custom PQC name-to-NID substitution with provider-aware matching in ncrypto.

Centralize known algorithm names, public key-type names, capabilities, and backend compatibility in ncrypto. Use named key generation jobs and remove asymmetric EVP_PKEY constants from the internal JavaScript binding.

Assisted-by: Codex

@panva
crypto: use names for asymmetric key algorithms
4308fdf 
Provider-backed keys can have no numeric OpenSSL ID. Identify and
construct asymmetric keys by algorithm name, replacing the custom PQC
name-to-NID substitution with provider-aware matching in ncrypto.

Centralize known algorithm names, public key-type names, capabilities,
and backend compatibility in ncrypto. Use named key generation jobs and
remove asymmetric EVP_PKEY constants from the internal JavaScript
binding.

Signed-off-by: Filip Skokan <panva.ip@gmail.com>
Assisted-by: Codex
@nodejs-github-bot

nodejs-github-bot commented Sep 10, 2026

Copy link
Copy Markdown
Collaborator

Review requested:

  • @nodejs/crypto
  • @nodejs/performance
  • @nodejs/security-wg

@nodejs-github-bot nodejs-github-bot added lib / src Issues and PRs involving general changes in the lib/ or src/ directories. needs-ci PRs that need a full CI run. labels Sep 10, 2026
@panva

panva commented Sep 10, 2026

Copy link
Copy Markdown
Member Author

Benchmark GHA (crypto / keyobject): https://github.com/nodejs/node/actions/runs/34348821454

Results

[!WARNING]
Do not take GHA benchmark results as face value, always confirm them
using a dedicated machine, e.g. Jenkins CI.

Benchmark results:

                                                                                                                              confidence improvement accuracy (*)    (**)   (***)
crypto/create-keyobject.js n=1000 keyFormat='der-pkcs8' keyType='ec'                                                                         -1.19 %       ±8.48% ±11.18% ±14.34%
crypto/create-keyobject.js n=1000 keyFormat='der-pkcs8' keyType='ed25519'                                                                    -0.05 %       ±6.85%  ±9.04% ±11.59%
crypto/create-keyobject.js n=1000 keyFormat='der-pkcs8' keyType='ml-dsa-44'                                                                  -1.42 %       ±6.44%  ±8.49% ±10.89%
crypto/create-keyobject.js n=1000 keyFormat='der-pkcs8' keyType='rsa'                                                                        -0.10 %       ±8.34% ±10.99% ±14.11%
crypto/create-keyobject.js n=1000 keyFormat='der-spki' keyType='ec'                                                                           0.20 %       ±9.14% ±12.04% ±15.45%
crypto/create-keyobject.js n=1000 keyFormat='der-spki' keyType='ed25519'                                                                      1.05 %       ±8.84% ±11.65% ±14.95%
crypto/create-keyobject.js n=1000 keyFormat='der-spki' keyType='ml-dsa-44'                                                                    0.49 %      ±10.07% ±13.28% ±17.04%
crypto/create-keyobject.js n=1000 keyFormat='der-spki' keyType='rsa'                                                                          3.08 %       ±9.22% ±12.15% ±15.59%
crypto/create-keyobject.js n=1000 keyFormat='jwk-private' keyType='ec'                                                                       -0.47 %       ±6.90%  ±9.10% ±11.68%
crypto/create-keyobject.js n=1000 keyFormat='jwk-private' keyType='ed25519'                                                                   1.59 %       ±6.46%  ±8.52% ±10.93%
crypto/create-keyobject.js n=1000 keyFormat='jwk-private' keyType='ml-dsa-44'                                                                -2.82 %       ±5.88%  ±7.75%  ±9.94%
crypto/create-keyobject.js n=1000 keyFormat='jwk-private' keyType='rsa'                                                                       0.66 %       ±6.70%  ±8.83% ±11.33%
crypto/create-keyobject.js n=1000 keyFormat='jwk-public' keyType='ec'                                                                         0.29 %       ±7.61% ±10.03% ±12.87%
crypto/create-keyobject.js n=1000 keyFormat='jwk-public' keyType='ed25519'                                                                   -0.11 %       ±8.39% ±11.06% ±14.19%
crypto/create-keyobject.js n=1000 keyFormat='jwk-public' keyType='ml-dsa-44'                                                                 -3.46 %       ±8.91% ±11.74% ±15.07%
crypto/create-keyobject.js n=1000 keyFormat='jwk-public' keyType='rsa'                                                                        0.77 %       ±8.06% ±10.62% ±13.63%
crypto/create-keyobject.js n=1000 keyFormat='pkcs8' keyType='ec'                                                                              0.70 %       ±8.97% ±11.82% ±15.17%
crypto/create-keyobject.js n=1000 keyFormat='pkcs8' keyType='ed25519'                                                                         1.30 %       ±6.71%  ±8.85% ±11.35%
crypto/create-keyobject.js n=1000 keyFormat='pkcs8' keyType='ml-dsa-44'                                                                       0.85 %       ±6.67%  ±8.80% ±11.29%
crypto/create-keyobject.js n=1000 keyFormat='pkcs8' keyType='rsa'                                                                            -0.32 %       ±7.70% ±10.15% ±13.03%
crypto/create-keyobject.js n=1000 keyFormat='raw-private' keyType='ec'                                                                        2.27 %       ±7.14%  ±9.41% ±12.08%
crypto/create-keyobject.js n=1000 keyFormat='raw-private' keyType='ed25519'                                                                  -0.07 %       ±6.36%  ±8.38% ±10.75%
crypto/create-keyobject.js n=1000 keyFormat='raw-public' keyType='ec'                                                                         2.84 %       ±7.81% ±10.29% ±13.20%
crypto/create-keyobject.js n=1000 keyFormat='raw-public' keyType='ed25519'                                                                    2.83 %       ±8.59% ±11.33% ±14.53%
crypto/create-keyobject.js n=1000 keyFormat='raw-public' keyType='ml-dsa-44'                                                                 -1.07 %       ±9.68% ±12.76% ±16.37%
crypto/create-keyobject.js n=1000 keyFormat='raw-seed' keyType='ml-dsa-44'                                                                    0.96 %       ±6.13%  ±8.08% ±10.37%
crypto/create-keyobject.js n=1000 keyFormat='spki' keyType='ec'                                                                               2.45 %       ±9.53% ±12.56% ±16.12%
crypto/create-keyobject.js n=1000 keyFormat='spki' keyType='ed25519'                                                                          0.59 %       ±8.94% ±11.79% ±15.13%
crypto/create-keyobject.js n=1000 keyFormat='spki' keyType='ml-dsa-44'                                                                        1.66 %       ±8.82% ±11.62% ±14.91%
crypto/create-keyobject.js n=1000 keyFormat='spki' keyType='rsa'                                                                             -0.12 %       ±8.67% ±11.42% ±14.66%
crypto/keyobject-serialization.js n=10000 type='private' format='der' operation='export' keyType='ed25519'                                   -0.99 %       ±8.56% ±11.29% ±14.48%
crypto/keyobject-serialization.js n=10000 type='private' format='der' operation='export' keyType='ed448'                                     -1.39 %       ±8.59% ±11.32% ±14.53%
crypto/keyobject-serialization.js n=10000 type='private' format='der' operation='export' keyType='ml-dsa-44'                                 -0.18 %       ±8.47% ±11.16% ±14.32%
crypto/keyobject-serialization.js n=10000 type='private' format='der' operation='export' keyType='ml-dsa-87'                                 -1.22 %       ±8.57% ±11.29% ±14.49%
crypto/keyobject-serialization.js n=10000 type='private' format='der' operation='export' keyType='ml-kem-1024'                               -1.07 %       ±8.44% ±11.13% ±14.28%
crypto/keyobject-serialization.js n=10000 type='private' format='der' operation='export' keyType='ml-kem-768'                                 0.32 %       ±8.39% ±11.06% ±14.19%
crypto/keyobject-serialization.js n=10000 type='private' format='der' operation='export' keyType='p-256'                                     -0.08 %       ±7.81% ±10.30% ±13.21%
crypto/keyobject-serialization.js n=10000 type='private' format='der' operation='export' keyType='p-384'                                     -2.42 %      ±13.61% ±17.94% ±23.01%
crypto/keyobject-serialization.js n=10000 type='private' format='der' operation='export' keyType='p-521'                                     -1.87 %      ±12.91% ±17.02% ±21.84%
crypto/keyobject-serialization.js n=10000 type='private' format='der' operation='export' keyType='rsa-multiprime'                            -0.60 %       ±8.08% ±10.65% ±13.67%
crypto/keyobject-serialization.js n=10000 type='private' format='der' operation='export' keyType='rsa-pss'                                   -0.37 %       ±7.68% ±10.12% ±12.99%
crypto/keyobject-serialization.js n=10000 type='private' format='der' operation='export' keyType='rsa'                                       -0.36 %       ±7.86% ±10.36% ±13.30%
crypto/keyobject-serialization.js n=10000 type='private' format='der' operation='export' keyType='slh-dsa-sha2-128s'                          0.45 %       ±8.46% ±11.15% ±14.30%
crypto/keyobject-serialization.js n=10000 type='private' format='der' operation='export' keyType='slh-dsa-shake-256s'                        -0.37 %       ±8.64% ±11.39% ±14.62%
crypto/keyobject-serialization.js n=10000 type='private' format='der' operation='export' keyType='x25519'                                    -1.90 %       ±8.48% ±11.18% ±14.35%
crypto/keyobject-serialization.js n=10000 type='private' format='der' operation='export' keyType='x448'                                      -0.07 %       ±8.77% ±11.56% ±14.84%
crypto/keyobject-serialization.js n=10000 type='private' format='der' operation='import' keyType='ed25519'                                   -0.86 %       ±7.35%  ±9.69% ±12.43%
crypto/keyobject-serialization.js n=10000 type='private' format='der' operation='import' keyType='ed448'                                     -1.02 %      ±15.31% ±20.18% ±25.89%
crypto/keyobject-serialization.js n=10000 type='private' format='der' operation='import' keyType='ml-dsa-44'                                  0.14 %       ±6.87%  ±9.05% ±11.61%
crypto/keyobject-serialization.js n=10000 type='private' format='der' operation='import' keyType='ml-dsa-87'                                 -0.97 %       ±6.39%  ±8.43% ±10.81%
crypto/keyobject-serialization.js n=10000 type='private' format='der' operation='import' keyType='ml-kem-1024'                               -0.74 %       ±7.67% ±10.11% ±12.97%
crypto/keyobject-serialization.js n=10000 type='private' format='der' operation='import' keyType='ml-kem-768'                                -0.64 %       ±7.98% ±10.51% ±13.49%
crypto/keyobject-serialization.js n=10000 type='private' format='der' operation='import' keyType='p-256'                                     -0.47 %       ±9.39% ±12.38% ±15.89%
crypto/keyobject-serialization.js n=10000 type='private' format='der' operation='import' keyType='p-384'                                     -1.14 %       ±7.81% ±10.29% ±13.21%
crypto/keyobject-serialization.js n=10000 type='private' format='der' operation='import' keyType='p-521'                                     -0.47 %       ±7.45%  ±9.82% ±12.60%
crypto/keyobject-serialization.js n=10000 type='private' format='der' operation='import' keyType='rsa-multiprime'                             0.14 %       ±9.22% ±12.15% ±15.59%
crypto/keyobject-serialization.js n=10000 type='private' format='der' operation='import' keyType='rsa-pss'                                   -1.17 %       ±8.91% ±11.75% ±15.08%
crypto/keyobject-serialization.js n=10000 type='private' format='der' operation='import' keyType='rsa'                                       -0.47 %       ±9.05% ±11.93% ±15.30%
crypto/keyobject-serialization.js n=10000 type='private' format='der' operation='import' keyType='slh-dsa-sha2-128s'                         -1.16 %       ±9.36% ±12.34% ±15.84%
crypto/keyobject-serialization.js n=10000 type='private' format='der' operation='import' keyType='slh-dsa-shake-256s'                         0.01 %       ±9.30% ±12.26% ±15.73%
crypto/keyobject-serialization.js n=10000 type='private' format='der' operation='import' keyType='x25519'                                    -0.95 %       ±7.28%  ±9.60% ±12.32%
crypto/keyobject-serialization.js n=10000 type='private' format='der' operation='import' keyType='x448'                                      -4.32 %      ±15.19% ±20.03% ±25.70%
crypto/keyobject-serialization.js n=10000 type='private' format='jwk' operation='export' keyType='ed25519'                                   -1.03 %       ±7.87% ±10.38% ±13.32%
crypto/keyobject-serialization.js n=10000 type='private' format='jwk' operation='export' keyType='ed448'                                      1.81 %       ±7.78% ±10.25% ±13.16%
crypto/keyobject-serialization.js n=10000 type='private' format='jwk' operation='export' keyType='ml-dsa-44'                                  1.07 %       ±7.60% ±10.02% ±12.86%
crypto/keyobject-serialization.js n=10000 type='private' format='jwk' operation='export' keyType='ml-dsa-87'                                 -2.16 %       ±7.45%  ±9.83% ±12.61%
crypto/keyobject-serialization.js n=10000 type='private' format='jwk' operation='export' keyType='ml-kem-1024'                               -0.35 %       ±6.03%  ±7.95% ±10.21%
crypto/keyobject-serialization.js n=10000 type='private' format='jwk' operation='export' keyType='ml-kem-768'                                -0.83 %       ±6.23%  ±8.22% ±10.54%
crypto/keyobject-serialization.js n=10000 type='private' format='jwk' operation='export' keyType='p-256'                                     -1.64 %       ±5.57%  ±7.35%  ±9.43%
crypto/keyobject-serialization.js n=10000 type='private' format='jwk' operation='export' keyType='p-384'                                     -3.02 %      ±18.05% ±23.79% ±30.53%
crypto/keyobject-serialization.js n=10000 type='private' format='jwk' operation='export' keyType='p-521'                                      0.19 %      ±16.39% ±21.60% ±27.71%
crypto/keyobject-serialization.js n=10000 type='private' format='jwk' operation='export' keyType='rsa-multiprime'                            -0.69 %       ±5.04%  ±6.64%  ±8.52%
crypto/keyobject-serialization.js n=10000 type='private' format='jwk' operation='export' keyType='rsa'                                        0.71 %       ±4.76%  ±6.28%  ±8.06%
crypto/keyobject-serialization.js n=10000 type='private' format='jwk' operation='export' keyType='slh-dsa-sha2-128s'                         -0.22 %       ±7.78% ±10.25% ±13.15%
crypto/keyobject-serialization.js n=10000 type='private' format='jwk' operation='export' keyType='slh-dsa-shake-256s'                        -7.58 %       ±7.62% ±10.05% ±12.90%
crypto/keyobject-serialization.js n=10000 type='private' format='jwk' operation='export' keyType='x25519'                                     0.19 %       ±7.84% ±10.34% ±13.26%
crypto/keyobject-serialization.js n=10000 type='private' format='jwk' operation='export' keyType='x448'                                      -1.76 %       ±7.67% ±10.11% ±12.97%
crypto/keyobject-serialization.js n=10000 type='private' format='jwk' operation='import' keyType='ed25519'                                   -1.06 %       ±6.74%  ±8.89% ±11.40%
crypto/keyobject-serialization.js n=10000 type='private' format='jwk' operation='import' keyType='ed448'                                     -0.53 %      ±15.55% ±20.49% ±26.30%
crypto/keyobject-serialization.js n=10000 type='private' format='jwk' operation='import' keyType='ml-dsa-44'                                 -0.97 %       ±6.69%  ±8.82% ±11.31%
crypto/keyobject-serialization.js n=10000 type='private' format='jwk' operation='import' keyType='ml-dsa-87'                                 -1.20 %       ±6.22%  ±8.20% ±10.52%
crypto/keyobject-serialization.js n=10000 type='private' format='jwk' operation='import' keyType='ml-kem-1024'                               -0.75 %       ±6.39%  ±8.43% ±10.81%
crypto/keyobject-serialization.js n=10000 type='private' format='jwk' operation='import' keyType='ml-kem-768'                                -2.10 %       ±6.68%  ±8.81% ±11.30%
crypto/keyobject-serialization.js n=10000 type='private' format='jwk' operation='import' keyType='p-256'                                     -0.68 %       ±7.56%  ±9.97% ±12.79%
crypto/keyobject-serialization.js n=10000 type='private' format='jwk' operation='import' keyType='p-384'                                      0.85 %      ±11.17% ±14.72% ±18.89%
crypto/keyobject-serialization.js n=10000 type='private' format='jwk' operation='import' keyType='p-521'                                      0.11 %      ±18.80% ±24.79% ±31.80%
crypto/keyobject-serialization.js n=10000 type='private' format='jwk' operation='import' keyType='rsa-multiprime'                             0.74 %       ±7.90% ±10.41% ±13.36%
crypto/keyobject-serialization.js n=10000 type='private' format='jwk' operation='import' keyType='rsa'                                        1.20 %       ±7.44%  ±9.81% ±12.58%
crypto/keyobject-serialization.js n=10000 type='private' format='jwk' operation='import' keyType='slh-dsa-sha2-128s'                         -7.03 %       ±8.31% ±10.95% ±14.06%
crypto/keyobject-serialization.js n=10000 type='private' format='jwk' operation='import' keyType='slh-dsa-shake-256s'                        -5.22 %       ±8.40% ±11.07% ±14.20%
crypto/keyobject-serialization.js n=10000 type='private' format='jwk' operation='import' keyType='x25519'                                    -0.94 %       ±6.80%  ±8.96% ±11.49%
crypto/keyobject-serialization.js n=10000 type='private' format='jwk' operation='import' keyType='x448'                                      -2.27 %      ±15.46% ±20.38% ±26.16%
crypto/keyobject-serialization.js n=10000 type='private' format='pem' operation='export' keyType='ed25519'                                   -1.09 %       ±8.43% ±11.11% ±14.26%
crypto/keyobject-serialization.js n=10000 type='private' format='pem' operation='export' keyType='ed448'                                     -1.87 %       ±8.40% ±11.08% ±14.21%
crypto/keyobject-serialization.js n=10000 type='private' format='pem' operation='export' keyType='ml-dsa-44'                                  0.90 %       ±8.44% ±11.12% ±14.27%
crypto/keyobject-serialization.js n=10000 type='private' format='pem' operation='export' keyType='ml-dsa-87'                                 -0.98 %       ±8.27% ±10.90% ±13.99%
crypto/keyobject-serialization.js n=10000 type='private' format='pem' operation='export' keyType='ml-kem-1024'                               -0.22 %       ±8.16% ±10.75% ±13.80%
crypto/keyobject-serialization.js n=10000 type='private' format='pem' operation='export' keyType='ml-kem-768'                                 0.97 %       ±8.33% ±10.98% ±14.09%
crypto/keyobject-serialization.js n=10000 type='private' format='pem' operation='export' keyType='p-256'                                     -1.11 %       ±7.59% ±10.00% ±12.84%
crypto/keyobject-serialization.js n=10000 type='private' format='pem' operation='export' keyType='p-384'                                     -0.98 %      ±13.71% ±18.07% ±23.19%
crypto/keyobject-serialization.js n=10000 type='private' format='pem' operation='export' keyType='p-521'                                      0.18 %      ±12.92% ±17.03% ±21.86%
crypto/keyobject-serialization.js n=10000 type='private' format='pem' operation='export' keyType='rsa-multiprime'                            -1.63 %       ±7.40%  ±9.75% ±12.52%
crypto/keyobject-serialization.js n=10000 type='private' format='pem' operation='export' keyType='rsa-pss'                                    0.37 %       ±7.12%  ±9.39% ±12.05%
crypto/keyobject-serialization.js n=10000 type='private' format='pem' operation='export' keyType='rsa'                                        0.49 %       ±7.40%  ±9.76% ±12.52%
crypto/keyobject-serialization.js n=10000 type='private' format='pem' operation='export' keyType='slh-dsa-sha2-128s'                          0.88 %       ±8.28% ±10.92% ±14.01%
crypto/keyobject-serialization.js n=10000 type='private' format='pem' operation='export' keyType='slh-dsa-shake-256s'                        -1.60 %       ±8.41% ±11.09% ±14.23%
crypto/keyobject-serialization.js n=10000 type='private' format='pem' operation='export' keyType='x25519'                                    -1.58 %       ±8.33% ±10.97% ±14.08%
crypto/keyobject-serialization.js n=10000 type='private' format='pem' operation='export' keyType='x448'                                      -0.82 %       ±8.29% ±10.93% ±14.03%
crypto/keyobject-serialization.js n=10000 type='private' format='pem' operation='import' keyType='ed25519'                                   -1.09 %       ±7.17%  ±9.45% ±12.13%
crypto/keyobject-serialization.js n=10000 type='private' format='pem' operation='import' keyType='ed448'                                     -0.88 %      ±14.86% ±19.59% ±25.14%
crypto/keyobject-serialization.js n=10000 type='private' format='pem' operation='import' keyType='ml-dsa-44'                                  0.30 %       ±7.09%  ±9.35% ±12.00%
crypto/keyobject-serialization.js n=10000 type='private' format='pem' operation='import' keyType='ml-dsa-87'                                 -0.07 %       ±6.57%  ±8.66% ±11.11%
crypto/keyobject-serialization.js n=10000 type='private' format='pem' operation='import' keyType='ml-kem-1024'                               -0.47 %       ±7.76% ±10.23% ±13.12%
crypto/keyobject-serialization.js n=10000 type='private' format='pem' operation='import' keyType='ml-kem-768'                                 0.72 %       ±8.33% ±10.98% ±14.08%
crypto/keyobject-serialization.js n=10000 type='private' format='pem' operation='import' keyType='p-256'                                     -1.70 %       ±9.25% ±12.19% ±15.65%
crypto/keyobject-serialization.js n=10000 type='private' format='pem' operation='import' keyType='p-384'                                     -3.23 %       ±8.21% ±10.83% ±13.89%
crypto/keyobject-serialization.js n=10000 type='private' format='pem' operation='import' keyType='p-521'                                     -0.90 %       ±8.00% ±10.54% ±13.52%
crypto/keyobject-serialization.js n=10000 type='private' format='pem' operation='import' keyType='rsa-multiprime'                            -0.96 %       ±8.78% ±11.57% ±14.85%
crypto/keyobject-serialization.js n=10000 type='private' format='pem' operation='import' keyType='rsa-pss'                                   -1.56 %       ±8.45% ±11.14% ±14.30%
crypto/keyobject-serialization.js n=10000 type='private' format='pem' operation='import' keyType='rsa'                                        0.32 %       ±8.68% ±11.44% ±14.67%
crypto/keyobject-serialization.js n=10000 type='private' format='pem' operation='import' keyType='slh-dsa-sha2-128s'                         -0.61 %       ±9.18% ±12.10% ±15.53%
crypto/keyobject-serialization.js n=10000 type='private' format='pem' operation='import' keyType='slh-dsa-shake-256s'                         0.27 %       ±9.30% ±12.26% ±15.73%
crypto/keyobject-serialization.js n=10000 type='private' format='pem' operation='import' keyType='x25519'                                    -0.63 %       ±7.13%  ±9.40% ±12.06%
crypto/keyobject-serialization.js n=10000 type='private' format='pem' operation='import' keyType='x448'                                       0.12 %      ±14.99% ±19.76% ±25.36%
crypto/keyobject-serialization.js n=10000 type='private' format='raw-private' operation='export' keyType='ed25519'                           -3.44 %       ±8.27% ±10.90% ±13.98%
crypto/keyobject-serialization.js n=10000 type='private' format='raw-private' operation='export' keyType='ed448'                             -2.17 %       ±8.75% ±11.53% ±14.79%
crypto/keyobject-serialization.js n=10000 type='private' format='raw-private' operation='export' keyType='p-256'                             -2.70 %       ±6.05%  ±7.97% ±10.23%
crypto/keyobject-serialization.js n=10000 type='private' format='raw-private' operation='export' keyType='p-384'                             -2.87 %      ±16.46% ±21.70% ±27.84%
crypto/keyobject-serialization.js n=10000 type='private' format='raw-private' operation='export' keyType='p-521'                             -0.86 %      ±14.57% ±19.20% ±24.64%
crypto/keyobject-serialization.js n=10000 type='private' format='raw-private' operation='export' keyType='slh-dsa-sha2-128s'                 -2.72 %       ±8.11% ±10.69% ±13.72%
crypto/keyobject-serialization.js n=10000 type='private' format='raw-private' operation='export' keyType='slh-dsa-shake-256s'                -4.46 %       ±8.32% ±10.97% ±14.08%
crypto/keyobject-serialization.js n=10000 type='private' format='raw-private' operation='export' keyType='x25519'                            -5.00 %       ±8.24% ±10.86% ±13.94%
crypto/keyobject-serialization.js n=10000 type='private' format='raw-private' operation='export' keyType='x448'                              -4.38 %       ±8.56% ±11.28% ±14.48%
crypto/keyobject-serialization.js n=10000 type='private' format='raw-private' operation='import' keyType='ed25519'                           -0.32 %       ±6.76%  ±8.91% ±11.43%
crypto/keyobject-serialization.js n=10000 type='private' format='raw-private' operation='import' keyType='ed448'                             -0.89 %      ±15.71% ±20.70% ±26.56%
crypto/keyobject-serialization.js n=10000 type='private' format='raw-private' operation='import' keyType='p-256'                              2.34 %       ±8.18% ±10.79% ±13.84%
crypto/keyobject-serialization.js n=10000 type='private' format='raw-private' operation='import' keyType='p-384'                              2.12 %      ±14.29% ±18.83% ±24.17%
crypto/keyobject-serialization.js n=10000 type='private' format='raw-private' operation='import' keyType='p-521'                              0.98 %      ±20.55% ±27.08% ±34.75%
crypto/keyobject-serialization.js n=10000 type='private' format='raw-private' operation='import' keyType='slh-dsa-sha2-128s'                  7.89 %       ±9.34% ±12.31% ±15.80%
crypto/keyobject-serialization.js n=10000 type='private' format='raw-private' operation='import' keyType='slh-dsa-shake-256s'        ***     47.14 %      ±11.49% ±15.15% ±19.44%
crypto/keyobject-serialization.js n=10000 type='private' format='raw-private' operation='import' keyType='x25519'                            -0.26 %       ±6.70%  ±8.83% ±11.33%
crypto/keyobject-serialization.js n=10000 type='private' format='raw-private' operation='import' keyType='x448'                              -2.09 %      ±15.70% ±20.70% ±26.56%
crypto/keyobject-serialization.js n=10000 type='private' format='raw-seed' operation='export' keyType='ml-dsa-44'                            -2.34 %       ±8.94% ±11.78% ±15.11%
crypto/keyobject-serialization.js n=10000 type='private' format='raw-seed' operation='export' keyType='ml-dsa-87'                            -5.08 %       ±8.88% ±11.71% ±15.03%
crypto/keyobject-serialization.js n=10000 type='private' format='raw-seed' operation='export' keyType='ml-kem-1024'                          -0.15 %       ±9.75% ±12.86% ±16.50%
crypto/keyobject-serialization.js n=10000 type='private' format='raw-seed' operation='export' keyType='ml-kem-768'                           -2.27 %       ±9.44% ±12.45% ±15.97%
crypto/keyobject-serialization.js n=10000 type='private' format='raw-seed' operation='import' keyType='ml-dsa-44'                             0.01 %       ±6.58%  ±8.68% ±11.13%
crypto/keyobject-serialization.js n=10000 type='private' format='raw-seed' operation='import' keyType='ml-dsa-87'                            -0.50 %       ±6.28%  ±8.27% ±10.61%
crypto/keyobject-serialization.js n=10000 type='private' format='raw-seed' operation='import' keyType='ml-kem-1024'                           0.26 %       ±6.46%  ±8.51% ±10.92%
crypto/keyobject-serialization.js n=10000 type='private' format='raw-seed' operation='import' keyType='ml-kem-768'                           -1.00 %       ±6.92%  ±9.13% ±11.71%
crypto/keyobject-serialization.js n=10000 type='public' format='der' operation='export' keyType='ed25519'                                    -2.10 %       ±8.40% ±11.08% ±14.21%
crypto/keyobject-serialization.js n=10000 type='public' format='der' operation='export' keyType='ed448'                                      -1.74 %       ±8.63% ±11.37% ±14.59%
crypto/keyobject-serialization.js n=10000 type='public' format='der' operation='export' keyType='ml-dsa-44'                                  -0.61 %       ±8.51% ±11.22% ±14.39%
crypto/keyobject-serialization.js n=10000 type='public' format='der' operation='export' keyType='ml-dsa-87'                                  -1.01 %       ±8.51% ±11.21% ±14.39%
crypto/keyobject-serialization.js n=10000 type='public' format='der' operation='export' keyType='ml-kem-1024'                                 0.38 %       ±8.31% ±10.96% ±14.06%
crypto/keyobject-serialization.js n=10000 type='public' format='der' operation='export' keyType='ml-kem-768'                                  0.43 %       ±8.31% ±10.95% ±14.05%
crypto/keyobject-serialization.js n=10000 type='public' format='der' operation='export' keyType='p-256'                                      -1.33 %       ±7.02%  ±9.25% ±11.87%
crypto/keyobject-serialization.js n=10000 type='public' format='der' operation='export' keyType='p-384'                                      -1.95 %      ±15.91% ±20.97% ±26.91%
crypto/keyobject-serialization.js n=10000 type='public' format='der' operation='export' keyType='p-521'                                      -1.65 %      ±14.38% ±18.96% ±24.33%
crypto/keyobject-serialization.js n=10000 type='public' format='der' operation='export' keyType='rsa-multiprime'                             -1.34 %       ±8.33% ±10.98% ±14.10%
crypto/keyobject-serialization.js n=10000 type='public' format='der' operation='export' keyType='rsa-pss'                                    -0.72 %       ±8.14% ±10.73% ±13.76%
crypto/keyobject-serialization.js n=10000 type='public' format='der' operation='export' keyType='rsa'                                        -0.58 %       ±8.20% ±10.81% ±13.87%
crypto/keyobject-serialization.js n=10000 type='public' format='der' operation='export' keyType='slh-dsa-sha2-128s'                           0.23 %       ±8.41% ±11.09% ±14.23%
crypto/keyobject-serialization.js n=10000 type='public' format='der' operation='export' keyType='slh-dsa-shake-256s'                         -1.18 %       ±8.45% ±11.13% ±14.28%
crypto/keyobject-serialization.js n=10000 type='public' format='der' operation='export' keyType='x25519'                                     -2.01 %       ±8.56% ±11.28% ±14.47%
crypto/keyobject-serialization.js n=10000 type='public' format='der' operation='export' keyType='x448'                                       -1.58 %       ±8.60% ±11.34% ±14.55%
crypto/keyobject-serialization.js n=10000 type='public' format='der' operation='import' keyType='ed25519'                                    -0.62 %       ±9.11% ±12.00% ±15.40%
crypto/keyobject-serialization.js n=10000 type='public' format='der' operation='import' keyType='ed448'                                       0.39 %       ±9.41% ±12.41% ±15.92%
crypto/keyobject-serialization.js n=10000 type='public' format='der' operation='import' keyType='ml-dsa-44'                                   1.24 %       ±9.85% ±12.99% ±16.67%
crypto/keyobject-serialization.js n=10000 type='public' format='der' operation='import' keyType='ml-dsa-87'                                  -1.91 %       ±9.73% ±12.82% ±16.45%
crypto/keyobject-serialization.js n=10000 type='public' format='der' operation='import' keyType='ml-kem-1024'                                -0.54 %       ±7.85% ±10.34% ±13.27%
crypto/keyobject-serialization.js n=10000 type='public' format='der' operation='import' keyType='ml-kem-768'                                 -0.71 %       ±8.52% ±11.23% ±14.40%
crypto/keyobject-serialization.js n=10000 type='public' format='der' operation='import' keyType='p-256'                                      -1.06 %       ±9.52% ±12.54% ±16.09%
crypto/keyobject-serialization.js n=10000 type='public' format='der' operation='import' keyType='p-384'                                      -2.59 %       ±7.87% ±10.38% ±13.32%
crypto/keyobject-serialization.js n=10000 type='public' format='der' operation='import' keyType='p-521'                                      -0.57 %       ±7.72% ±10.17% ±13.05%
crypto/keyobject-serialization.js n=10000 type='public' format='der' operation='import' keyType='rsa-multiprime'                              1.40 %       ±9.68% ±12.76% ±16.37%
crypto/keyobject-serialization.js n=10000 type='public' format='der' operation='import' keyType='rsa-pss'                                    -0.76 %       ±9.27% ±12.21% ±15.67%
crypto/keyobject-serialization.js n=10000 type='public' format='der' operation='import' keyType='rsa'                                         0.22 %       ±9.38% ±12.36% ±15.86%
crypto/keyobject-serialization.js n=10000 type='public' format='der' operation='import' keyType='slh-dsa-sha2-128s'                          -1.22 %       ±9.18% ±12.10% ±15.52%
crypto/keyobject-serialization.js n=10000 type='public' format='der' operation='import' keyType='slh-dsa-shake-256s'                         -1.04 %       ±9.29% ±12.25% ±15.71%
crypto/keyobject-serialization.js n=10000 type='public' format='der' operation='import' keyType='x25519'                                     -1.53 %       ±9.20% ±12.13% ±15.57%
crypto/keyobject-serialization.js n=10000 type='public' format='der' operation='import' keyType='x448'                                       -2.67 %       ±9.48% ±12.50% ±16.04%
crypto/keyobject-serialization.js n=10000 type='public' format='jwk' operation='export' keyType='ed25519'                                    -2.67 %       ±7.69% ±10.13% ±13.00%
crypto/keyobject-serialization.js n=10000 type='public' format='jwk' operation='export' keyType='ed448'                                      -2.91 %       ±7.34%  ±9.68% ±12.41%
crypto/keyobject-serialization.js n=10000 type='public' format='jwk' operation='export' keyType='ml-dsa-44'                                  -5.24 %       ±7.41%  ±9.77% ±12.54%
crypto/keyobject-serialization.js n=10000 type='public' format='jwk' operation='export' keyType='ml-dsa-87'                            *     -7.88 %       ±7.23%  ±9.54% ±12.24%
crypto/keyobject-serialization.js n=10000 type='public' format='jwk' operation='export' keyType='ml-kem-1024'                                -2.62 %       ±5.51%  ±7.26%  ±9.32%
crypto/keyobject-serialization.js n=10000 type='public' format='jwk' operation='export' keyType='ml-kem-768'                                 -4.15 %       ±6.02%  ±7.94% ±10.19%
crypto/keyobject-serialization.js n=10000 type='public' format='jwk' operation='export' keyType='p-256'                                      -1.98 %       ±5.79%  ±7.63%  ±9.79%
crypto/keyobject-serialization.js n=10000 type='public' format='jwk' operation='export' keyType='p-384'                                      -3.13 %      ±18.14% ±23.91% ±30.68%
crypto/keyobject-serialization.js n=10000 type='public' format='jwk' operation='export' keyType='p-521'                                      -0.78 %      ±16.50% ±21.75% ±27.91%
crypto/keyobject-serialization.js n=10000 type='public' format='jwk' operation='export' keyType='rsa-multiprime'                             -0.21 %       ±4.71%  ±6.21%  ±7.97%
crypto/keyobject-serialization.js n=10000 type='public' format='jwk' operation='export' keyType='rsa'                                        -1.35 %       ±4.57%  ±6.02%  ±7.72%
crypto/keyobject-serialization.js n=10000 type='public' format='jwk' operation='export' keyType='slh-dsa-sha2-128s'                          -6.93 %       ±7.38%  ±9.72% ±12.48%
crypto/keyobject-serialization.js n=10000 type='public' format='jwk' operation='export' keyType='slh-dsa-shake-256s'                 ***    -12.90 %       ±7.56%  ±9.96% ±12.78%
crypto/keyobject-serialization.js n=10000 type='public' format='jwk' operation='export' keyType='x25519'                                     -0.88 %       ±7.76% ±10.22% ±13.12%
crypto/keyobject-serialization.js n=10000 type='public' format='jwk' operation='export' keyType='x448'                                       -6.48 %       ±7.36%  ±9.70% ±12.45%
crypto/keyobject-serialization.js n=10000 type='public' format='jwk' operation='import' keyType='ed25519'                                    -2.04 %       ±8.53% ±11.25% ±14.43%
crypto/keyobject-serialization.js n=10000 type='public' format='jwk' operation='import' keyType='ed448'                                      -1.22 %       ±8.47% ±11.16% ±14.32%
crypto/keyobject-serialization.js n=10000 type='public' format='jwk' operation='import' keyType='ml-dsa-44'                                  -4.89 %       ±8.96% ±11.81% ±15.15%
crypto/keyobject-serialization.js n=10000 type='public' format='jwk' operation='import' keyType='ml-dsa-87'                                  -3.63 %       ±7.99% ±10.53% ±13.51%
crypto/keyobject-serialization.js n=10000 type='public' format='jwk' operation='import' keyType='ml-kem-1024'                                -3.82 %       ±7.17%  ±9.46% ±12.13%
crypto/keyobject-serialization.js n=10000 type='public' format='jwk' operation='import' keyType='ml-kem-768'                                 -5.92 %       ±7.63% ±10.05% ±12.90%
crypto/keyobject-serialization.js n=10000 type='public' format='jwk' operation='import' keyType='p-256'                                      -0.99 %       ±8.52% ±11.22% ±14.40%
crypto/keyobject-serialization.js n=10000 type='public' format='jwk' operation='import' keyType='p-384'                                      -2.74 %      ±10.32% ±13.61% ±17.46%
crypto/keyobject-serialization.js n=10000 type='public' format='jwk' operation='import' keyType='p-521'                                      -2.34 %       ±8.66% ±11.42% ±14.65%
crypto/keyobject-serialization.js n=10000 type='public' format='jwk' operation='import' keyType='rsa-multiprime'                             -1.35 %       ±8.66% ±11.41% ±14.64%
crypto/keyobject-serialization.js n=10000 type='public' format='jwk' operation='import' keyType='rsa'                                         1.25 %       ±8.52% ±11.24% ±14.42%
crypto/keyobject-serialization.js n=10000 type='public' format='jwk' operation='import' keyType='slh-dsa-sha2-128s'                    *     -8.85 %       ±8.36% ±11.02% ±14.14%
crypto/keyobject-serialization.js n=10000 type='public' format='jwk' operation='import' keyType='slh-dsa-shake-256s'                         -7.03 %       ±8.28% ±10.91% ±14.00%
crypto/keyobject-serialization.js n=10000 type='public' format='jwk' operation='import' keyType='x25519'                                     -2.01 %       ±8.80% ±11.59% ±14.88%
crypto/keyobject-serialization.js n=10000 type='public' format='jwk' operation='import' keyType='x448'                                       -3.20 %       ±8.70% ±11.47% ±14.72%
crypto/keyobject-serialization.js n=10000 type='public' format='pem' operation='export' keyType='ed25519'                                    -2.11 %       ±8.93% ±11.77% ±15.11%
crypto/keyobject-serialization.js n=10000 type='public' format='pem' operation='export' keyType='ed448'                                      -2.46 %       ±8.83% ±11.63% ±14.93%
crypto/keyobject-serialization.js n=10000 type='public' format='pem' operation='export' keyType='ml-dsa-44'                                  -0.84 %       ±8.58% ±11.31% ±14.51%
crypto/keyobject-serialization.js n=10000 type='public' format='pem' operation='export' keyType='ml-dsa-87'                                  -1.29 %       ±8.55% ±11.27% ±14.46%
crypto/keyobject-serialization.js n=10000 type='public' format='pem' operation='export' keyType='ml-kem-1024'                                -0.31 %       ±7.65% ±10.09% ±12.94%
crypto/keyobject-serialization.js n=10000 type='public' format='pem' operation='export' keyType='ml-kem-768'                                 -0.76 %       ±8.01% ±10.55% ±13.54%
crypto/keyobject-serialization.js n=10000 type='public' format='pem' operation='export' keyType='p-256'                                      -0.32 %       ±8.08% ±10.64% ±13.66%
crypto/keyobject-serialization.js n=10000 type='public' format='pem' operation='export' keyType='p-384'                                      -2.17 %      ±13.80% ±18.19% ±23.35%
crypto/keyobject-serialization.js n=10000 type='public' format='pem' operation='export' keyType='p-521'                                       0.64 %      ±12.32% ±16.25% ±20.85%
crypto/keyobject-serialization.js n=10000 type='public' format='pem' operation='export' keyType='rsa-multiprime'                             -1.27 %       ±8.97% ±11.82% ±15.17%
crypto/keyobject-serialization.js n=10000 type='public' format='pem' operation='export' keyType='rsa-pss'                                    -1.73 %       ±8.76% ±11.54% ±14.81%
crypto/keyobject-serialization.js n=10000 type='public' format='pem' operation='export' keyType='rsa'                                        -0.59 %       ±8.75% ±11.53% ±14.79%
crypto/keyobject-serialization.js n=10000 type='public' format='pem' operation='export' keyType='slh-dsa-sha2-128s'                           0.31 %       ±8.90% ±11.74% ±15.06%
crypto/keyobject-serialization.js n=10000 type='public' format='pem' operation='export' keyType='slh-dsa-shake-256s'                         -0.64 %       ±9.01% ±11.88% ±15.24%
crypto/keyobject-serialization.js n=10000 type='public' format='pem' operation='export' keyType='x25519'                                     -1.50 %       ±8.98% ±11.83% ±15.18%
crypto/keyobject-serialization.js n=10000 type='public' format='pem' operation='export' keyType='x448'                                       -1.16 %       ±8.96% ±11.81% ±15.15%
crypto/keyobject-serialization.js n=10000 type='public' format='pem' operation='import' keyType='ed25519'                                    -3.10 %       ±9.39% ±12.38% ±15.89%
crypto/keyobject-serialization.js n=10000 type='public' format='pem' operation='import' keyType='ed448'                                      -1.61 %       ±9.31% ±12.27% ±15.74%
crypto/keyobject-serialization.js n=10000 type='public' format='pem' operation='import' keyType='ml-dsa-44'                                  -0.84 %       ±8.98% ±11.83% ±15.18%
crypto/keyobject-serialization.js n=10000 type='public' format='pem' operation='import' keyType='ml-dsa-87'                                  -1.57 %       ±8.54% ±11.25% ±14.44%
crypto/keyobject-serialization.js n=10000 type='public' format='pem' operation='import' keyType='ml-kem-1024'                                -1.46 %       ±7.84% ±10.34% ±13.26%
crypto/keyobject-serialization.js n=10000 type='public' format='pem' operation='import' keyType='ml-kem-768'                                 -0.13 %       ±8.50% ±11.21% ±14.38%
crypto/keyobject-serialization.js n=10000 type='public' format='pem' operation='import' keyType='p-256'                                      -1.45 %       ±9.76% ±12.86% ±16.50%
crypto/keyobject-serialization.js n=10000 type='public' format='pem' operation='import' keyType='p-384'                                      -2.69 %       ±8.33% ±10.98% ±14.09%
crypto/keyobject-serialization.js n=10000 type='public' format='pem' operation='import' keyType='p-521'                                       0.23 %       ±8.00% ±10.54% ±13.53%
crypto/keyobject-serialization.js n=10000 type='public' format='pem' operation='import' keyType='rsa-multiprime'                             -0.97 %       ±9.37% ±12.35% ±15.84%
crypto/keyobject-serialization.js n=10000 type='public' format='pem' operation='import' keyType='rsa-pss'                                    -1.61 %       ±9.33% ±12.30% ±15.78%
crypto/keyobject-serialization.js n=10000 type='public' format='pem' operation='import' keyType='rsa'                                        -0.72 %       ±9.39% ±12.38% ±15.89%
crypto/keyobject-serialization.js n=10000 type='public' format='pem' operation='import' keyType='slh-dsa-sha2-128s'                          -0.68 %       ±9.46% ±12.47% ±16.00%
crypto/keyobject-serialization.js n=10000 type='public' format='pem' operation='import' keyType='slh-dsa-shake-256s'                         -0.83 %       ±9.36% ±12.34% ±15.83%
crypto/keyobject-serialization.js n=10000 type='public' format='pem' operation='import' keyType='x25519'                                     -1.10 %       ±9.31% ±12.27% ±15.75%
crypto/keyobject-serialization.js n=10000 type='public' format='pem' operation='import' keyType='x448'                                       -2.17 %       ±9.55% ±12.59% ±16.16%
crypto/keyobject-serialization.js n=10000 type='public' format='raw-public' operation='export' keyType='ed25519'                             -1.95 %       ±8.47% ±11.16% ±14.32%
crypto/keyobject-serialization.js n=10000 type='public' format='raw-public' operation='export' keyType='ed448'                               -3.46 %       ±8.59% ±11.33% ±14.53%
crypto/keyobject-serialization.js n=10000 type='public' format='raw-public' operation='export' keyType='ml-dsa-44'                           -2.87 %      ±11.53% ±15.20% ±19.51%
crypto/keyobject-serialization.js n=10000 type='public' format='raw-public' operation='export' keyType='ml-dsa-87'                           -5.67 %      ±13.60% ±17.92% ±23.00%
crypto/keyobject-serialization.js n=10000 type='public' format='raw-public' operation='export' keyType='ml-kem-1024'                         -1.55 %       ±7.90% ±10.41% ±13.36%
crypto/keyobject-serialization.js n=10000 type='public' format='raw-public' operation='export' keyType='ml-kem-768'                          -2.39 %       ±7.09%  ±9.35% ±12.00%
crypto/keyobject-serialization.js n=10000 type='public' format='raw-public' operation='export' keyType='p-256'                               -1.81 %       ±5.52%  ±7.28%  ±9.34%
crypto/keyobject-serialization.js n=10000 type='public' format='raw-public' operation='export' keyType='p-384'                               -3.58 %      ±18.22% ±24.01% ±30.81%
crypto/keyobject-serialization.js n=10000 type='public' format='raw-public' operation='export' keyType='p-521'                               -1.08 %      ±16.65% ±21.94% ±28.16%
crypto/keyobject-serialization.js n=10000 type='public' format='raw-public' operation='export' keyType='slh-dsa-sha2-128s'                   -3.28 %       ±8.39% ±11.06% ±14.19%
crypto/keyobject-serialization.js n=10000 type='public' format='raw-public' operation='export' keyType='slh-dsa-shake-256s'                  -4.00 %       ±8.47% ±11.17% ±14.33%
crypto/keyobject-serialization.js n=10000 type='public' format='raw-public' operation='export' keyType='x25519'                              -5.40 %       ±8.38% ±11.04% ±14.17%
crypto/keyobject-serialization.js n=10000 type='public' format='raw-public' operation='export' keyType='x448'                                -2.26 %       ±8.84% ±11.65% ±14.95%
crypto/keyobject-serialization.js n=10000 type='public' format='raw-public' operation='import' keyType='ed25519'                              3.61 %       ±8.95% ±11.80% ±15.15%
crypto/keyobject-serialization.js n=10000 type='public' format='raw-public' operation='import' keyType='ed448'                                2.98 %       ±9.03% ±11.91% ±15.28%
crypto/keyobject-serialization.js n=10000 type='public' format='raw-public' operation='import' keyType='ml-dsa-44'                           -1.50 %       ±9.30% ±12.26% ±15.73%
crypto/keyobject-serialization.js n=10000 type='public' format='raw-public' operation='import' keyType='ml-dsa-87'                           -0.39 %       ±9.71% ±12.80% ±16.43%
crypto/keyobject-serialization.js n=10000 type='public' format='raw-public' operation='import' keyType='ml-kem-1024'                          0.82 %       ±7.68% ±10.13% ±13.00%
crypto/keyobject-serialization.js n=10000 type='public' format='raw-public' operation='import' keyType='ml-kem-768'                          -0.34 %       ±7.85% ±10.35% ±13.28%
crypto/keyobject-serialization.js n=10000 type='public' format='raw-public' operation='import' keyType='p-256'                                2.55 %       ±8.52% ±11.24% ±14.42%
crypto/keyobject-serialization.js n=10000 type='public' format='raw-public' operation='import' keyType='p-384'                               -0.03 %      ±10.44% ±13.76% ±17.65%
crypto/keyobject-serialization.js n=10000 type='public' format='raw-public' operation='import' keyType='p-521'                                1.41 %       ±8.68% ±11.45% ±14.69%
crypto/keyobject-serialization.js n=10000 type='public' format='raw-public' operation='import' keyType='slh-dsa-sha2-128s'                    9.21 %       ±9.43% ±12.42% ±15.94%
crypto/keyobject-serialization.js n=10000 type='public' format='raw-public' operation='import' keyType='slh-dsa-shake-256s'          ***     51.61 %      ±11.82% ±15.58% ±20.00%
crypto/keyobject-serialization.js n=10000 type='public' format='raw-public' operation='import' keyType='x25519'                               2.29 %       ±8.85% ±11.66% ±14.96%
crypto/keyobject-serialization.js n=10000 type='public' format='raw-public' operation='import' keyType='x448'                                 1.97 %       ±8.93% ±11.77% ±15.10%

Be aware that when doing many comparisons the risk of a false-positive
result increases. In this case, there are 270 comparisons, you can thus
expect the following amount of false-positive results:
  13.50 false positives, when considering a   5% risk acceptance (*, **, ***),
  2.70 false positives, when considering a   1% risk acceptance (**, ***),
  0.27 false positives, when considering a 0.1% risk acceptance (***)

[!WARNING]
Do not take GHA benchmark results as face value, always confirm them
using a dedicated machine, e.g. Jenkins CI.

Benchmark GHA (crypto / oneshot-sign.js): https://github.com/nodejs/node/actions/runs/34348824410

Results

[!WARNING]
Do not take GHA benchmark results as face value, always confirm them
using a dedicated machine, e.g. Jenkins CI.

Benchmark results:

                                                                                                     confidence improvement accuracy (*)    (**)   (***)
crypto/oneshot-sign.js n=1000 keyFormat='der' mode='async-parallel' keyType='ec'                                     0.15 %       ±9.48% ±12.50% ±16.04%
crypto/oneshot-sign.js n=1000 keyFormat='der' mode='async-parallel' keyType='ed25519'                               -0.57 %       ±7.35%  ±9.68% ±12.42%
crypto/oneshot-sign.js n=1000 keyFormat='der' mode='async-parallel' keyType='ml-dsa-44'                             -0.28 %       ±7.70% ±10.15% ±13.02%
crypto/oneshot-sign.js n=1000 keyFormat='der' mode='async-parallel' keyType='rsa'                                   -1.61 %       ±5.37%  ±7.08%  ±9.09%
crypto/oneshot-sign.js n=1000 keyFormat='der' mode='async' keyType='ec'                                             -2.18 %       ±8.09% ±10.67% ±13.69%
crypto/oneshot-sign.js n=1000 keyFormat='der' mode='async' keyType='ed25519'                                        -0.43 %       ±6.89%  ±9.08% ±11.65%
crypto/oneshot-sign.js n=1000 keyFormat='der' mode='async' keyType='ml-dsa-44'                                       0.46 %       ±6.27%  ±8.26% ±10.61%
crypto/oneshot-sign.js n=1000 keyFormat='der' mode='async' keyType='rsa'                                            -1.29 %       ±3.11%  ±4.10%  ±5.26%
crypto/oneshot-sign.js n=1000 keyFormat='der' mode='sync' keyType='ec'                                              -2.23 %       ±8.28% ±10.91% ±14.00%
crypto/oneshot-sign.js n=1000 keyFormat='der' mode='sync' keyType='ed25519'                                         -2.03 %       ±7.03%  ±9.26% ±11.88%
crypto/oneshot-sign.js n=1000 keyFormat='der' mode='sync' keyType='ml-dsa-44'                                       -0.02 %       ±5.82%  ±7.67%  ±9.85%
crypto/oneshot-sign.js n=1000 keyFormat='der' mode='sync' keyType='rsa'                                             -0.44 %       ±2.65%  ±3.49%  ±4.48%
crypto/oneshot-sign.js n=1000 keyFormat='jwk' mode='async-parallel' keyType='ec'                                    -0.87 %       ±7.20%  ±9.49% ±12.17%
crypto/oneshot-sign.js n=1000 keyFormat='jwk' mode='async-parallel' keyType='ed25519'                               -1.59 %       ±7.43%  ±9.80% ±12.57%
crypto/oneshot-sign.js n=1000 keyFormat='jwk' mode='async-parallel' keyType='ml-dsa-44'                             -0.92 %       ±7.65% ±10.08% ±12.94%
crypto/oneshot-sign.js n=1000 keyFormat='jwk' mode='async-parallel' keyType='rsa'                                   -0.52 %       ±5.18%  ±6.82%  ±8.76%
crypto/oneshot-sign.js n=1000 keyFormat='jwk' mode='async' keyType='ec'                                             -1.62 %       ±7.41%  ±9.76% ±12.53%
crypto/oneshot-sign.js n=1000 keyFormat='jwk' mode='async' keyType='ed25519'                                        -0.67 %       ±6.86%  ±9.05% ±11.61%
crypto/oneshot-sign.js n=1000 keyFormat='jwk' mode='async' keyType='ml-dsa-44'                                      -1.34 %       ±6.21%  ±8.19% ±10.51%
crypto/oneshot-sign.js n=1000 keyFormat='jwk' mode='async' keyType='rsa'                                            -1.29 %       ±3.23%  ±4.25%  ±5.46%
crypto/oneshot-sign.js n=1000 keyFormat='jwk' mode='sync' keyType='ec'                                              -1.20 %       ±7.15%  ±9.42% ±12.09%
crypto/oneshot-sign.js n=1000 keyFormat='jwk' mode='sync' keyType='ed25519'                                         -2.04 %       ±6.87%  ±9.06% ±11.62%
crypto/oneshot-sign.js n=1000 keyFormat='jwk' mode='sync' keyType='ml-dsa-44'                                       -0.25 %       ±5.62%  ±7.40%  ±9.50%
crypto/oneshot-sign.js n=1000 keyFormat='jwk' mode='sync' keyType='rsa'                                             -0.32 %       ±2.76%  ±3.63%  ±4.66%
crypto/oneshot-sign.js n=1000 keyFormat='keyObject.unique' mode='async-parallel' keyType='ec'                       -1.11 %       ±7.22%  ±9.52% ±12.21%
crypto/oneshot-sign.js n=1000 keyFormat='keyObject.unique' mode='async-parallel' keyType='ed25519'                  -0.63 %       ±8.43% ±11.12% ±14.26%
crypto/oneshot-sign.js n=1000 keyFormat='keyObject.unique' mode='async-parallel' keyType='ml-dsa-44'                -1.85 %       ±7.32%  ±9.65% ±12.38%
crypto/oneshot-sign.js n=1000 keyFormat='keyObject.unique' mode='async-parallel' keyType='rsa'                      -0.47 %       ±5.61%  ±7.40%  ±9.49%
crypto/oneshot-sign.js n=1000 keyFormat='keyObject' mode='async-parallel' keyType='ec'                              -1.12 %       ±7.74% ±10.20% ±13.08%
crypto/oneshot-sign.js n=1000 keyFormat='keyObject' mode='async-parallel' keyType='ed25519'                         -0.20 %       ±8.60% ±11.33% ±14.54%
crypto/oneshot-sign.js n=1000 keyFormat='keyObject' mode='async-parallel' keyType='ml-dsa-44'                        0.24 %       ±7.53%  ±9.93% ±12.74%
crypto/oneshot-sign.js n=1000 keyFormat='keyObject' mode='async-parallel' keyType='rsa'                              0.28 %       ±6.18%  ±8.14% ±10.45%
crypto/oneshot-sign.js n=1000 keyFormat='keyObject' mode='async' keyType='ec'                                       -1.43 %       ±7.80% ±10.28% ±13.19%
crypto/oneshot-sign.js n=1000 keyFormat='keyObject' mode='async' keyType='ed25519'                                  -0.27 %       ±7.97% ±10.50% ±13.47%
crypto/oneshot-sign.js n=1000 keyFormat='keyObject' mode='async' keyType='ml-dsa-44'                                -0.80 %       ±6.14%  ±8.09% ±10.38%
crypto/oneshot-sign.js n=1000 keyFormat='keyObject' mode='async' keyType='rsa'                                      -1.44 %       ±2.92%  ±3.85%  ±4.94%
crypto/oneshot-sign.js n=1000 keyFormat='keyObject' mode='sync' keyType='ec'                                        -1.99 %       ±6.28%  ±8.27% ±10.62%
crypto/oneshot-sign.js n=1000 keyFormat='keyObject' mode='sync' keyType='ed25519'                                   -0.77 %       ±6.66%  ±8.78% ±11.27%
crypto/oneshot-sign.js n=1000 keyFormat='keyObject' mode='sync' keyType='ml-dsa-44'                                  0.35 %       ±5.64%  ±7.43%  ±9.54%
crypto/oneshot-sign.js n=1000 keyFormat='keyObject' mode='sync' keyType='rsa'                                       -0.60 %       ±2.89%  ±3.81%  ±4.89%
crypto/oneshot-sign.js n=1000 keyFormat='pem' mode='async-parallel' keyType='ec'                                    -2.49 %       ±9.55% ±12.59% ±16.15%
crypto/oneshot-sign.js n=1000 keyFormat='pem' mode='async-parallel' keyType='ed25519'                               -0.49 %       ±6.80%  ±8.96% ±11.50%
crypto/oneshot-sign.js n=1000 keyFormat='pem' mode='async-parallel' keyType='ml-dsa-44'                              0.28 %       ±8.06% ±10.63% ±13.63%
crypto/oneshot-sign.js n=1000 keyFormat='pem' mode='async-parallel' keyType='rsa'                                   -0.93 %       ±5.28%  ±6.96%  ±8.93%
crypto/oneshot-sign.js n=1000 keyFormat='pem' mode='async' keyType='ec'                                             -0.91 %       ±8.19% ±10.79% ±13.85%
crypto/oneshot-sign.js n=1000 keyFormat='pem' mode='async' keyType='ed25519'                                        -0.61 %       ±6.96%  ±9.17% ±11.77%
crypto/oneshot-sign.js n=1000 keyFormat='pem' mode='async' keyType='ml-dsa-44'                                      -0.32 %       ±6.40%  ±8.44% ±10.82%
crypto/oneshot-sign.js n=1000 keyFormat='pem' mode='async' keyType='rsa'                                            -0.26 %       ±3.41%  ±4.49%  ±5.76%
crypto/oneshot-sign.js n=1000 keyFormat='pem' mode='sync' keyType='ec'                                              -1.73 %       ±8.36% ±11.01% ±14.13%
crypto/oneshot-sign.js n=1000 keyFormat='pem' mode='sync' keyType='ed25519'                                         -0.93 %       ±6.63%  ±8.74% ±11.21%
crypto/oneshot-sign.js n=1000 keyFormat='pem' mode='sync' keyType='ml-dsa-44'                                       -0.85 %       ±5.86%  ±7.73%  ±9.92%
crypto/oneshot-sign.js n=1000 keyFormat='pem' mode='sync' keyType='rsa'                                             -0.11 %       ±2.83%  ±3.72%  ±4.78%
crypto/oneshot-sign.js n=1000 keyFormat='raw-private' mode='async-parallel' keyType='ec'                             0.55 %       ±8.54% ±11.26% ±14.45%
crypto/oneshot-sign.js n=1000 keyFormat='raw-private' mode='async-parallel' keyType='ed25519'                        0.07 %       ±7.42%  ±9.78% ±12.55%
crypto/oneshot-sign.js n=1000 keyFormat='raw-private' mode='async' keyType='ec'                                      1.65 %       ±7.88% ±10.39% ±13.33%
crypto/oneshot-sign.js n=1000 keyFormat='raw-private' mode='async' keyType='ed25519'                                -0.50 %       ±6.91%  ±9.11% ±11.69%
crypto/oneshot-sign.js n=1000 keyFormat='raw-private' mode='sync' keyType='ec'                                      -0.25 %       ±7.31%  ±9.64% ±12.37%
crypto/oneshot-sign.js n=1000 keyFormat='raw-private' mode='sync' keyType='ed25519'                                 -1.17 %       ±6.56%  ±8.65% ±11.10%
crypto/oneshot-sign.js n=1000 keyFormat='raw-seed' mode='async-parallel' keyType='ml-dsa-44'                         0.78 %       ±7.51%  ±9.90% ±12.70%
crypto/oneshot-sign.js n=1000 keyFormat='raw-seed' mode='async' keyType='ml-dsa-44'                                 -0.15 %       ±6.23%  ±8.21% ±10.53%
crypto/oneshot-sign.js n=1000 keyFormat='raw-seed' mode='sync' keyType='ml-dsa-44'                                  -0.21 %       ±5.77%  ±7.61%  ±9.76%

Be aware that when doing many comparisons the risk of a false-positive
result increases. In this case, there are 61 comparisons, you can thus
expect the following amount of false-positive results:
  3.05 false positives, when considering a   5% risk acceptance (*, **, ***),
  0.61 false positives, when considering a   1% risk acceptance (**, ***),
  0.06 false positives, when considering a 0.1% risk acceptance (***)

[!WARNING]
Do not take GHA benchmark results as face value, always confirm them
using a dedicated machine, e.g. Jenkins CI.

Benchmark GHA (crypto / oneshot-verify.js): https://github.com/nodejs/node/actions/runs/34348827543

Results

[!WARNING]
Do not take GHA benchmark results as face value, always confirm them
using a dedicated machine, e.g. Jenkins CI.

Benchmark results:

                                                                                                       confidence improvement accuracy (*)    (**)   (***)
crypto/oneshot-verify.js n=1000 keyFormat='der' mode='async-parallel' keyType='ec'                                    -1.12 %       ±9.65% ±12.72% ±16.32%
crypto/oneshot-verify.js n=1000 keyFormat='der' mode='async-parallel' keyType='ed25519'                                0.81 %      ±10.42% ±13.74% ±17.63%
crypto/oneshot-verify.js n=1000 keyFormat='der' mode='async-parallel' keyType='ml-dsa-44'                              1.07 %       ±9.09% ±11.98% ±15.37%
crypto/oneshot-verify.js n=1000 keyFormat='der' mode='async-parallel' keyType='rsa'                                    0.85 %      ±11.62% ±15.32% ±19.66%
crypto/oneshot-verify.js n=1000 keyFormat='der' mode='async' keyType='ec'                                             -0.64 %       ±7.16%  ±9.44% ±12.12%
crypto/oneshot-verify.js n=1000 keyFormat='der' mode='async' keyType='ed25519'                                         0.27 %       ±6.77%  ±8.92% ±11.45%
crypto/oneshot-verify.js n=1000 keyFormat='der' mode='async' keyType='ml-dsa-44'                                       0.51 %       ±8.19% ±10.80% ±13.86%
crypto/oneshot-verify.js n=1000 keyFormat='der' mode='async' keyType='rsa'                                            -0.78 %       ±8.24% ±10.87% ±13.94%
crypto/oneshot-verify.js n=1000 keyFormat='der' mode='sync' keyType='ec'                                               0.51 %       ±5.36%  ±7.06%  ±9.06%
crypto/oneshot-verify.js n=1000 keyFormat='der' mode='sync' keyType='ed25519'                                         -1.11 %       ±5.81%  ±7.65%  ±9.82%
crypto/oneshot-verify.js n=1000 keyFormat='der' mode='sync' keyType='ml-dsa-44'                                       -0.67 %       ±7.43%  ±9.79% ±12.56%
crypto/oneshot-verify.js n=1000 keyFormat='der' mode='sync' keyType='rsa'                                             -1.07 %       ±6.92%  ±9.12% ±11.70%
crypto/oneshot-verify.js n=1000 keyFormat='jwk' mode='async-parallel' keyType='ec'                                     1.23 %       ±9.83% ±12.96% ±16.62%
crypto/oneshot-verify.js n=1000 keyFormat='jwk' mode='async-parallel' keyType='ed25519'                               -2.39 %       ±9.63% ±12.70% ±16.29%
crypto/oneshot-verify.js n=1000 keyFormat='jwk' mode='async-parallel' keyType='ml-dsa-44'                             -0.52 %       ±8.84% ±11.65% ±14.95%
crypto/oneshot-verify.js n=1000 keyFormat='jwk' mode='async-parallel' keyType='rsa'                                    0.10 %      ±11.64% ±15.35% ±19.69%
crypto/oneshot-verify.js n=1000 keyFormat='jwk' mode='async' keyType='ec'                                             -0.67 %       ±7.02%  ±9.25% ±11.87%
crypto/oneshot-verify.js n=1000 keyFormat='jwk' mode='async' keyType='ed25519'                                         0.65 %       ±6.82%  ±8.99% ±11.53%
crypto/oneshot-verify.js n=1000 keyFormat='jwk' mode='async' keyType='ml-dsa-44'                                      -0.43 %       ±7.93% ±10.46% ±13.42%
crypto/oneshot-verify.js n=1000 keyFormat='jwk' mode='async' keyType='rsa'                                             0.25 %       ±8.08% ±10.65% ±13.67%
crypto/oneshot-verify.js n=1000 keyFormat='jwk' mode='sync' keyType='ec'                                              -0.50 %       ±4.89%  ±6.44%  ±8.26%
crypto/oneshot-verify.js n=1000 keyFormat='jwk' mode='sync' keyType='ed25519'                                          0.13 %       ±5.86%  ±7.73%  ±9.92%
crypto/oneshot-verify.js n=1000 keyFormat='jwk' mode='sync' keyType='ml-dsa-44'                                       -0.70 %       ±7.12%  ±9.38% ±12.04%
crypto/oneshot-verify.js n=1000 keyFormat='jwk' mode='sync' keyType='rsa'                                             -0.98 %       ±6.07%  ±8.00% ±10.26%
crypto/oneshot-verify.js n=1000 keyFormat='keyObject.unique' mode='async-parallel' keyType='ec'                       -0.33 %       ±6.42%  ±8.46% ±10.86%
crypto/oneshot-verify.js n=1000 keyFormat='keyObject.unique' mode='async-parallel' keyType='ed25519'                  -0.18 %       ±9.53% ±12.56% ±16.12%
crypto/oneshot-verify.js n=1000 keyFormat='keyObject.unique' mode='async-parallel' keyType='ml-dsa-44'                -1.17 %       ±8.13% ±10.71% ±13.75%
crypto/oneshot-verify.js n=1000 keyFormat='keyObject.unique' mode='async-parallel' keyType='rsa'                      -0.53 %       ±8.97% ±11.83% ±15.18%
crypto/oneshot-verify.js n=1000 keyFormat='keyObject' mode='async-parallel' keyType='ec'                               1.25 %       ±6.34%  ±8.35% ±10.72%
crypto/oneshot-verify.js n=1000 keyFormat='keyObject' mode='async-parallel' keyType='ed25519'                          0.26 %       ±9.56% ±12.61% ±16.18%
crypto/oneshot-verify.js n=1000 keyFormat='keyObject' mode='async-parallel' keyType='ml-dsa-44'                        0.83 %       ±8.23% ±10.85% ±13.92%
crypto/oneshot-verify.js n=1000 keyFormat='keyObject' mode='async-parallel' keyType='rsa'                              0.09 %       ±8.90% ±11.73% ±15.06%
crypto/oneshot-verify.js n=1000 keyFormat='keyObject' mode='async' keyType='ec'                                       -1.10 %       ±6.49%  ±8.56% ±10.98%
crypto/oneshot-verify.js n=1000 keyFormat='keyObject' mode='async' keyType='ed25519'                                  -0.44 %       ±6.75%  ±8.90% ±11.41%
crypto/oneshot-verify.js n=1000 keyFormat='keyObject' mode='async' keyType='ml-dsa-44'                                 1.31 %       ±7.68% ±10.12% ±12.99%
crypto/oneshot-verify.js n=1000 keyFormat='keyObject' mode='async' keyType='rsa'                                      -1.27 %       ±7.74% ±10.21% ±13.09%
crypto/oneshot-verify.js n=1000 keyFormat='keyObject' mode='sync' keyType='ec'                                        -0.90 %       ±3.51%  ±4.62%  ±5.93%
crypto/oneshot-verify.js n=1000 keyFormat='keyObject' mode='sync' keyType='ed25519'                                   -0.19 %       ±5.69%  ±7.50%  ±9.62%
crypto/oneshot-verify.js n=1000 keyFormat='keyObject' mode='sync' keyType='ml-dsa-44'                                  0.38 %       ±6.85%  ±9.03% ±11.59%
crypto/oneshot-verify.js n=1000 keyFormat='keyObject' mode='sync' keyType='rsa'                                       -0.50 %       ±5.37%  ±7.08%  ±9.08%
crypto/oneshot-verify.js n=1000 keyFormat='pem' mode='async-parallel' keyType='ec'                                    -3.39 %      ±10.17% ±13.41% ±17.20%
crypto/oneshot-verify.js n=1000 keyFormat='pem' mode='async-parallel' keyType='ed25519'                               -0.27 %      ±10.81% ±14.25% ±18.28%
crypto/oneshot-verify.js n=1000 keyFormat='pem' mode='async-parallel' keyType='ml-dsa-44'                             -0.27 %       ±9.36% ±12.33% ±15.83%
crypto/oneshot-verify.js n=1000 keyFormat='pem' mode='async-parallel' keyType='rsa'                                   -0.50 %      ±10.77% ±14.20% ±18.22%
crypto/oneshot-verify.js n=1000 keyFormat='pem' mode='async' keyType='ec'                                             -0.46 %       ±7.15%  ±9.42% ±12.09%
crypto/oneshot-verify.js n=1000 keyFormat='pem' mode='async' keyType='ed25519'                                         0.98 %       ±6.92%  ±9.13% ±11.71%
crypto/oneshot-verify.js n=1000 keyFormat='pem' mode='async' keyType='ml-dsa-44'                                       2.08 %       ±8.12% ±10.71% ±13.74%
crypto/oneshot-verify.js n=1000 keyFormat='pem' mode='async' keyType='rsa'                                             1.11 %       ±8.29% ±10.92% ±14.01%
crypto/oneshot-verify.js n=1000 keyFormat='pem' mode='sync' keyType='ec'                                               0.26 %       ±5.30%  ±6.98%  ±8.96%
crypto/oneshot-verify.js n=1000 keyFormat='pem' mode='sync' keyType='ed25519'                                         -0.26 %       ±6.04%  ±7.97% ±10.22%
crypto/oneshot-verify.js n=1000 keyFormat='pem' mode='sync' keyType='ml-dsa-44'                                        1.03 %       ±7.54%  ±9.93% ±12.75%
crypto/oneshot-verify.js n=1000 keyFormat='pem' mode='sync' keyType='rsa'                                              0.28 %       ±7.25%  ±9.56% ±12.27%
crypto/oneshot-verify.js n=1000 keyFormat='raw-public' mode='async-parallel' keyType='ec'                              0.98 %       ±9.68% ±12.75% ±16.37%
crypto/oneshot-verify.js n=1000 keyFormat='raw-public' mode='async-parallel' keyType='ed25519'                        -1.70 %       ±9.20% ±12.12% ±15.56%
crypto/oneshot-verify.js n=1000 keyFormat='raw-public' mode='async-parallel' keyType='ml-dsa-44'                      -1.57 %       ±8.77% ±11.56% ±14.83%
crypto/oneshot-verify.js n=1000 keyFormat='raw-public' mode='async' keyType='ec'                                       0.94 %       ±7.12%  ±9.38% ±12.03%
crypto/oneshot-verify.js n=1000 keyFormat='raw-public' mode='async' keyType='ed25519'                                 -0.36 %       ±6.83%  ±9.01% ±11.56%
crypto/oneshot-verify.js n=1000 keyFormat='raw-public' mode='async' keyType='ml-dsa-44'                                0.20 %       ±7.98% ±10.51% ±13.49%
crypto/oneshot-verify.js n=1000 keyFormat='raw-public' mode='sync' keyType='ec'                                        0.09 %       ±4.74%  ±6.25%  ±8.02%
crypto/oneshot-verify.js n=1000 keyFormat='raw-public' mode='sync' keyType='ed25519'                                   0.20 %       ±5.76%  ±7.60%  ±9.75%
crypto/oneshot-verify.js n=1000 keyFormat='raw-public' mode='sync' keyType='ml-dsa-44'                                 0.63 %       ±7.35%  ±9.69% ±12.43%

Be aware that when doing many comparisons the risk of a false-positive
result increases. In this case, there are 61 comparisons, you can thus
expect the following amount of false-positive results:
  3.05 false positives, when considering a   5% risk acceptance (*, **, ***),
  0.61 false positives, when considering a   1% risk acceptance (**, ***),
  0.06 false positives, when considering a 0.1% risk acceptance (***)

[!WARNING]
Do not take GHA benchmark results as face value, always confirm them
using a dedicated machine, e.g. Jenkins CI.

Benchmark GHA (crypto / webcrypto-sign.js): https://github.com/nodejs/node/actions/runs/34348830291

Results

[!WARNING]
Do not take GHA benchmark results as face value, always confirm them
using a dedicated machine, e.g. Jenkins CI.

Benchmark results:

                                                                                              confidence improvement accuracy (*)    (**)   (***)
crypto/webcrypto-sign.js n=1000 keyReuse='shared' mode='parallel' keyType='ec'                               -3.25 %       ±6.50%  ±8.56% ±10.99%
crypto/webcrypto-sign.js n=1000 keyReuse='shared' mode='parallel' keyType='ed25519'                          -1.05 %       ±7.44%  ±9.81% ±12.58%
crypto/webcrypto-sign.js n=1000 keyReuse='shared' mode='parallel' keyType='ml-dsa-44'                         0.51 %       ±7.70% ±10.15% ±13.03%
crypto/webcrypto-sign.js n=1000 keyReuse='shared' mode='parallel' keyType='rsa-pss'                          -0.61 %       ±6.54%  ±8.63% ±11.07%
crypto/webcrypto-sign.js n=1000 keyReuse='shared' mode='parallel' keyType='rsassa-pkcs1-v1_5'                -1.13 %       ±6.82%  ±8.98% ±11.53%
crypto/webcrypto-sign.js n=1000 keyReuse='shared' mode='serial' keyType='ec'                                 -1.09 %       ±7.62% ±10.05% ±12.89%
crypto/webcrypto-sign.js n=1000 keyReuse='shared' mode='serial' keyType='ed25519'                            -0.01 %       ±6.73%  ±8.87% ±11.39%
crypto/webcrypto-sign.js n=1000 keyReuse='shared' mode='serial' keyType='ml-dsa-44'                          -0.29 %       ±6.04%  ±7.97% ±10.22%
crypto/webcrypto-sign.js n=1000 keyReuse='shared' mode='serial' keyType='rsa-pss'                             0.33 %       ±2.94%  ±3.88%  ±4.98%
crypto/webcrypto-sign.js n=1000 keyReuse='shared' mode='serial' keyType='rsassa-pkcs1-v1_5'                  -1.38 %       ±2.86%  ±3.77%  ±4.84%
crypto/webcrypto-sign.js n=1000 keyReuse='unique' mode='parallel' keyType='ec'                               -2.80 %       ±6.38%  ±8.41% ±10.79%
crypto/webcrypto-sign.js n=1000 keyReuse='unique' mode='parallel' keyType='ed25519'                           1.25 %       ±7.13%  ±9.40% ±12.06%
crypto/webcrypto-sign.js n=1000 keyReuse='unique' mode='parallel' keyType='ml-dsa-44'                         2.14 %       ±7.91% ±10.42% ±13.38%
crypto/webcrypto-sign.js n=1000 keyReuse='unique' mode='parallel' keyType='rsa-pss'                           0.54 %       ±5.64%  ±7.44%  ±9.54%
crypto/webcrypto-sign.js n=1000 keyReuse='unique' mode='parallel' keyType='rsassa-pkcs1-v1_5'                -2.17 %       ±5.79%  ±7.63%  ±9.79%

Be aware that when doing many comparisons the risk of a false-positive
result increases. In this case, there are 15 comparisons, you can thus
expect the following amount of false-positive results:
  0.75 false positives, when considering a   5% risk acceptance (*, **, ***),
  0.15 false positives, when considering a   1% risk acceptance (**, ***),
  0.01 false positives, when considering a 0.1% risk acceptance (***)

[!WARNING]
Do not take GHA benchmark results as face value, always confirm them
using a dedicated machine, e.g. Jenkins CI.

Benchmark GHA (crypto / webcrypto-verify.js): https://github.com/nodejs/node/actions/runs/34348833659

Results

[!WARNING]
Do not take GHA benchmark results as face value, always confirm them
using a dedicated machine, e.g. Jenkins CI.

Benchmark results:

                                                                                                confidence improvement accuracy (*)    (**)   (***)
crypto/webcrypto-verify.js n=1000 keyReuse='shared' mode='parallel' keyType='ec'                                0.64 %       ±9.46% ±12.47% ±16.00%
crypto/webcrypto-verify.js n=1000 keyReuse='shared' mode='parallel' keyType='ed25519'                          -1.10 %      ±10.08% ±13.29% ±17.06%
crypto/webcrypto-verify.js n=1000 keyReuse='shared' mode='parallel' keyType='ml-dsa-44'                         0.56 %       ±8.19% ±10.79% ±13.84%
crypto/webcrypto-verify.js n=1000 keyReuse='shared' mode='parallel' keyType='rsa-pss'                           2.56 %      ±11.33% ±14.94% ±19.17%
crypto/webcrypto-verify.js n=1000 keyReuse='shared' mode='parallel' keyType='rsassa-pkcs1-v1_5'                 0.83 %      ±10.85% ±14.30% ±18.34%
crypto/webcrypto-verify.js n=1000 keyReuse='shared' mode='serial' keyType='ec'                                  0.01 %       ±7.75% ±10.21% ±13.10%
crypto/webcrypto-verify.js n=1000 keyReuse='shared' mode='serial' keyType='ed25519'                             0.10 %       ±8.08% ±10.65% ±13.67%
crypto/webcrypto-verify.js n=1000 keyReuse='shared' mode='serial' keyType='ml-dsa-44'                          -0.00 %       ±8.71% ±11.48% ±14.72%
crypto/webcrypto-verify.js n=1000 keyReuse='shared' mode='serial' keyType='rsa-pss'                            -0.63 %       ±9.42% ±12.41% ±15.93%
crypto/webcrypto-verify.js n=1000 keyReuse='shared' mode='serial' keyType='rsassa-pkcs1-v1_5'                  -1.08 %       ±9.43% ±12.43% ±15.95%
crypto/webcrypto-verify.js n=1000 keyReuse='unique' mode='parallel' keyType='ec'                               -2.58 %       ±9.46% ±12.47% ±16.00%
crypto/webcrypto-verify.js n=1000 keyReuse='unique' mode='parallel' keyType='ed25519'                          -0.71 %      ±10.17% ±13.40% ±17.19%
crypto/webcrypto-verify.js n=1000 keyReuse='unique' mode='parallel' keyType='ml-dsa-44'                         0.28 %       ±7.97% ±10.50% ±13.47%
crypto/webcrypto-verify.js n=1000 keyReuse='unique' mode='parallel' keyType='rsa-pss'                           1.50 %      ±10.12% ±13.34% ±17.12%
crypto/webcrypto-verify.js n=1000 keyReuse='unique' mode='parallel' keyType='rsassa-pkcs1-v1_5'                -0.83 %       ±9.53% ±12.57% ±16.12%

Be aware that when doing many comparisons the risk of a false-positive
result increases. In this case, there are 15 comparisons, you can thus
expect the following amount of false-positive results:
  0.75 false positives, when considering a   5% risk acceptance (*, **, ***),
  0.15 false positives, when considering a   1% risk acceptance (**, ***),
  0.01 false positives, when considering a 0.1% risk acceptance (***)

[!WARNING]
Do not take GHA benchmark results as face value, always confirm them
using a dedicated machine, e.g. Jenkins CI.

Benchmark GHA (crypto / keygen.js): https://github.com/nodejs/node/actions/runs/34348840314

Results

[!WARNING]
Do not take GHA benchmark results as face value, always confirm them
using a dedicated machine, e.g. Jenkins CI.

Benchmark results:

                                         confidence improvement accuracy (*)    (**)   (***)
crypto/keygen.js n=100 method='dsaAsync'                 1.60 %       ±6.95%  ±9.16% ±11.75%
crypto/keygen.js n=100 method='dsaSync'                  0.92 %       ±2.96%  ±3.90%  ±5.00%
crypto/keygen.js n=100 method='rsaAsync'                -0.88 %       ±9.51% ±12.54% ±16.09%
crypto/keygen.js n=100 method='rsaSync'                 -1.34 %       ±4.31%  ±5.68%  ±7.29%

Be aware that when doing many comparisons the risk of a false-positive
result increases. In this case, there are 4 comparisons, you can thus
expect the following amount of false-positive results:
  0.20 false positives, when considering a   5% risk acceptance (*, **, ***),
  0.04 false positives, when considering a   1% risk acceptance (**, ***),
  0.00 false positives, when considering a 0.1% risk acceptance (***)

[!WARNING]
Do not take GHA benchmark results as face value, always confirm them
using a dedicated machine, e.g. Jenkins CI.

Benchmark GHA (crypto / rsa-encrypt-decrypt-throughput.js): https://github.com/nodejs/node/actions/runs/34348843444

Results

[!WARNING]
Do not take GHA benchmark results as face value, always confirm them
using a dedicated machine, e.g. Jenkins CI.

Benchmark results:

                                                                    confidence improvement accuracy (*)   (**)  (***)
crypto/rsa-encrypt-decrypt-throughput.js len=16 keylen='2048' n=500                 0.38 %       ±4.41% ±5.81% ±7.46%
crypto/rsa-encrypt-decrypt-throughput.js len=16 keylen='4096' n=500                 0.90 %       ±3.54% ±4.67% ±5.99%
crypto/rsa-encrypt-decrypt-throughput.js len=32 keylen='2048' n=500                 1.09 %       ±4.26% ±5.62% ±7.21%
crypto/rsa-encrypt-decrypt-throughput.js len=32 keylen='4096' n=500                 0.40 %       ±3.60% ±4.75% ±6.09%
crypto/rsa-encrypt-decrypt-throughput.js len=64 keylen='2048' n=500                 0.80 %       ±4.27% ±5.63% ±7.23%
crypto/rsa-encrypt-decrypt-throughput.js len=64 keylen='4096' n=500                -0.28 %       ±3.60% ±4.74% ±6.08%

Be aware that when doing many comparisons the risk of a false-positive
result increases. In this case, there are 6 comparisons, you can thus
expect the following amount of false-positive results:
  0.30 false positives, when considering a   5% risk acceptance (*, **, ***),
  0.06 false positives, when considering a   1% risk acceptance (**, ***),
  0.01 false positives, when considering a 0.1% risk acceptance (***)

[!WARNING]
Do not take GHA benchmark results as face value, always confirm them
using a dedicated machine, e.g. Jenkins CI.

Benchmark GHA (tls / tls-connect.js): https://github.com/nodejs/node/actions/runs/34348846429

Results

[!WARNING]
Do not take GHA benchmark results as face value, always confirm them
using a dedicated machine, e.g. Jenkins CI.

Benchmark results:

                                        confidence improvement accuracy (*)   (**)   (***)
tls/tls-connect.js dur=5 concurrency=1                  0.64 %       ±6.33% ±8.34% ±10.71%
tls/tls-connect.js dur=5 concurrency=10                -0.30 %       ±6.09% ±8.02% ±10.29%

Be aware that when doing many comparisons the risk of a false-positive
result increases. In this case, there are 2 comparisons, you can thus
expect the following amount of false-positive results:
  0.10 false positives, when considering a   5% risk acceptance (*, **, ***),
  0.02 false positives, when considering a   1% risk acceptance (**, ***),
  0.00 false positives, when considering a 0.1% risk acceptance (***)

[!WARNING]
Do not take GHA benchmark results as face value, always confirm them
using a dedicated machine, e.g. Jenkins CI.

@codecov

codecov Bot commented Sep 10, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

❌ Patch coverage is 85.95318% with 42 lines in your changes missing coverage. Please review.
✅ Project coverage is 90.21%. Comparing base (313b834) to head (4308fdf).
⚠️ Report is 111 commits behind head on main.

Files with missing lines Patch % Lines
src/crypto/crypto_keys.cc 88.55% 2 Missing and 17 partials ⚠️
src/crypto/crypto_ec.cc 42.85% 5 Missing and 7 partials ⚠️
src/crypto/crypto_sig.cc 75.00% 0 Missing and 4 partials ⚠️
src/crypto/crypto_common.cc 80.00% 0 Missing and 3 partials ⚠️
src/crypto/crypto_keygen.cc 77.77% 0 Missing and 2 partials ⚠️
src/crypto/crypto_keygen.h 50.00% 2 Missing ⚠️
Additional details and impacted files 
@@            Coverage Diff             @@
##             main   #65966      +/-   ##
==========================================
- Coverage   92.41%   90.21%   -2.21%     
==========================================
  Files         417      771     +354     
  Lines      189029   265161   +76132     
  Branches    28953    50392   +21439     
==========================================
+ Hits       174685   239203   +64518     
- Misses      14011    16977    +2966     
- Partials      333     8981    +8648
Files with missing lines Coverage Δ
lib/internal/crypto/cfrg.js 95.69% <100.00%> (-0.22%) ⬇️
lib/internal/crypto/kem_hybrids.js 98.38% <100.00%> (+<0.01%) ⬆️
lib/internal/crypto/keygen.js 92.94% <100.00%> (-0.56%) ⬇️
lib/internal/crypto/ml_dsa.js 97.29% <100.00%> (-0.10%) ⬇️
lib/internal/crypto/ml_kem.js 95.19% <100.00%> (-0.17%) ⬇️
lib/internal/crypto/util.js 97.39% <100.00%> (+0.80%) ⬆️
src/crypto/crypto_context.cc 71.66% <100.00%> (ø)
src/crypto/crypto_dh.cc 65.68% <100.00%> (ø)
src/crypto/crypto_dsa.cc 81.25% <100.00%> (ø)
src/crypto/crypto_ec.h 44.44% <100.00%> (ø)
... and 10 more

... and 467 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@panva
panva requested review from jasnell and removed request for jasnell September 11, 2026 08:06
@panva

panva commented Sep 15, 2026

Copy link
Copy Markdown
Member Author

@jasnell please take a look, this is a step towards moving more things to the openssl provider model

jasnell
jasnell reviewed Sep 15, 2026
View reviewed changes
Comment thread deps/ncrypto/ncrypto.h
static EVPKeyCtxPointer New(const EVPKeyPointer& key);
static EVPKeyCtxPointer NewFromID(int id);
static EVPKeyCtxPointer NewFromName(const char* name);
static EVPKeyCtxPointer NewFromAlgorithm(const KeyAlgorithm& algorithm);

@jasnell jasnell Sep 15, 2026

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

While I'm +1 on the change overall, removing the current NID apis means anyone else using ncrypto will be forced to transition immediately to the new api. I'd prefer to deprecate first for a short time before removing them to give some flexibility in the transition if possible.

@panva panva Sep 15, 2026 •
edited
Loading

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

IIRC all ncrypto consumers use BoringSSL which has its own compatibility branch here. We have not established any intent to maintain ncrypto API compatibility, right now it is merely a snapshot of node's own ncrypto state.

@panva panva Sep 15, 2026 •
edited
Loading

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

+ restoring the APIs in nodejs/ncrypto can be done as part of resolving the sync workflow, I don't see why we should subject maintainers of node's crypto with the burden of maintaining compatibility modes for other runtimes.

@nodejs-github-bot

nodejs-github-bot commented Sep 16, 2026

Copy link
Copy Markdown
Collaborator

CI: https://ci.nodejs.org/job/node-test-pull-request/77557/

@panva
panva requested a review from jasnell September 17, 2026 06:33
jasnell
jasnell reviewed Sep 17, 2026
View reviewed changes

@jasnell jasnell left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM So long as the update into ncrypto either gates these or waits on downstream consumers to be able to update. I'd still prefer the parallel api approach (either with deprecated apis or IFDEF gates)

@panva panva added author ready PRs with CI started, the required approvals, and no outstanding review comments. commit-queue PRs queued for automated landing through the Commit Queue. labels Sep 17, 2026
@nodejs-github-bot nodejs-github-bot added the lacks-second-approval Commit Queue PRs awaiting a second collaborator approval or completion of the required wait. label Sep 17, 2026
@nodejs-github-bot
nodejs-github-bot merged commit 1a3712d into nodejs:main Sep 17, 2026
96 of 97 checks passed
@nodejs-github-bot

nodejs-github-bot commented Sep 17, 2026

Copy link
Copy Markdown
Collaborator

Landed in 1a3712d

@nodejs-github-bot nodejs-github-bot removed commit-queue PRs queued for automated landing through the Commit Queue. lacks-second-approval Commit Queue PRs awaiting a second collaborator approval or completion of the required wait. labels Sep 17, 2026
@panva
panva deleted the nid-cleanup branch September 17, 2026 20:33
aduh95 pushed a commit that referenced this pull request Sep 18, 2026
@panva @aduh95
crypto: use names for asymmetric key algorithms
971adec 
Provider-backed keys can have no numeric OpenSSL ID. Identify and
construct asymmetric keys by algorithm name, replacing the custom PQC
name-to-NID substitution with provider-aware matching in ncrypto.

Centralize known algorithm names, public key-type names, capabilities,
and backend compatibility in ncrypto. Use named key generation jobs and
remove asymmetric EVP_PKEY constants from the internal JavaScript
binding.

Signed-off-by: Filip Skokan <panva.ip@gmail.com>
Assisted-by: Codex
PR-URL: #65966
Reviewed-By: James M Snell <jasnell@gmail.com>
@github-actions github-actions Bot mentioned this pull request Sep 20, 2026
Merged
@panva panva mentioned this pull request Sep 23, 2026
Closed
@panva panva added the backport-open-v24.x Indicate that the PR has an open backport label Sep 23, 2026
aduh95 pushed a commit that referenced this pull request Sep 25, 2026
@panva @aduh95
crypto: use names for asymmetric key algorithms
a4effe6 
Provider-backed keys can have no numeric OpenSSL ID. Identify and
construct asymmetric keys by algorithm name, replacing the custom PQC
name-to-NID substitution with provider-aware matching in ncrypto.

Centralize known algorithm names, public key-type names, capabilities,
and backend compatibility in ncrypto. Use named key generation jobs and
remove asymmetric EVP_PKEY constants from the internal JavaScript
binding.

Signed-off-by: Filip Skokan <panva.ip@gmail.com>
Assisted-by: Codex
PR-URL: #65966
Backport-PR-URL: #66233
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
@panva panva added backported-to-v24.x PRs backported to the v24.x-staging branch. and removed backport-open-v24.x Indicate that the PR has an open backport labels Sep 25, 2026
@github-actions github-actions Bot mentioned this pull request Oct 11, 2026
Merged
MarshallOfSound added a commit to electron/electron that referenced this pull request Oct 15, 2026
@MarshallOfSound
fix(patch): use names for asymmetric key algorithms
e2e4447 
Upstream dropped the BoringSSL guard in DhKeyGenTraits::Setup(), removed
ReadASN1Element() from ncrypto, and no longer includes <openssl/evp.h>
from env.h, so those hunks are no longer needed.

Ref: nodejs/node#65966
Ref: nodejs/node#66108
Ref: nodejs/node#65484
MarshallOfSound added a commit to electron/electron that referenced this pull request Oct 15, 2026
@MarshallOfSound
fix(patch): use names for asymmetric key algorithms
ec5bfb1 
Upstream dropped the BoringSSL guard in DhKeyGenTraits::Setup(), removed
ReadASN1Element() from ncrypto, and no longer includes <openssl/evp.h>
from env.h, so those hunks are no longer needed.

Ref: nodejs/node#65966
Ref: nodejs/node#66108
Ref: nodejs/node#65484
MarshallOfSound added a commit to electron/electron that referenced this pull request Oct 15, 2026
@MarshallOfSound
fix(patch): use names for asymmetric key algorithms
7d4fd4e 
Upstream dropped the BoringSSL guard in DhKeyGenTraits::Setup(), removed
ReadASN1Element() from ncrypto, and no longer includes <openssl/evp.h>
from env.h, so those hunks are no longer needed.

Ref: nodejs/node#65966
Ref: nodejs/node#66108
Ref: nodejs/node#65484
MarshallOfSound added a commit to electron/electron that referenced this pull request Oct 15, 2026
@MarshallOfSound
fix(patch): use names for asymmetric key algorithms
76e1d61 
Upstream dropped the BoringSSL guard in DhKeyGenTraits::Setup(), removed
ReadASN1Element() from ncrypto, and no longer includes <openssl/evp.h>
from env.h, so those hunks are no longer needed.

Ref: nodejs/node#65966
Ref: nodejs/node#66108
Ref: nodejs/node#65484
MarshallOfSound added a commit to electron/electron that referenced this pull request Oct 15, 2026
@MarshallOfSound
fix(patch): use names for asymmetric key algorithms
5120faa 
Upstream dropped the BoringSSL guard in DhKeyGenTraits::Setup(), removed
ReadASN1Element() from ncrypto, and no longer includes <openssl/evp.h>
from env.h, so those hunks are no longer needed.

Ref: nodejs/node#65966
Ref: nodejs/node#66108
Ref: nodejs/node#65484
MarshallOfSound added a commit to electron/electron that referenced this pull request Oct 15, 2026
@electron-roller @MarshallOfSound
chore: bump node to v24.22.0 (44-x-y) (#55004)
e67a209 
* chore: bump node in DEPS to v24.22.0

* fix(patch): enable the V8 sandbox in shared-cage builds

Upstream now enables the V8 sandbox only for shared-cage builds. Keep
Electron's behaviour of enabling it whenever pointer compression is on,
matching Chromium's V8. The unofficial.gni x86 hunk landed upstream.

Ref: nodejs/node#62237
Ref: nodejs/node#65491

* fix(patch): use names for asymmetric key algorithms

Upstream dropped the BoringSSL guard in DhKeyGenTraits::Setup(), removed
ReadASN1Element() from ncrypto, and no longer includes <openssl/evp.h>
from env.h, so those hunks are no longer needed.

Ref: nodejs/node#65966
Ref: nodejs/node#66108
Ref: nodejs/node#65484

* fix(patch): skip RSA-PSS keygen deprecation tests with BoringSSL

The skip is now upstream.

Ref: nodejs/node#65808

* fix(patch): detach cppgc wrappers from their Realm before it is freed

Upstream's CppgcWrapperList::Cleanup() now pops nodes itself and the
wrapper owns and frees its list node, so the local PopFront/delete hunk
is dropped.

Ref: nodejs/node#65778

* fix(patch): gate jspi flag on V8_ENABLE_WEBASSEMBLY

Ref: nodejs/node#66082

* chore: remove upstreamed patches

- nodejs/node#63985
- nodejs/node#65630
- nodejs/node#64453
- nodejs/node#65778

* chore: update patches (trivial only)

* chore: update filenames.auto.gni

* fix(patch): discover hashes from OpenSSL providers

ncrypto's DigestCache::aliases() now has a function-local static, so
ncrypto needs the no_exit_time_destructors config too.

Ref: nodejs/node#65484

* fix(patch): read the peer certificate chain without consuming it

sk_X509_num() returns size_t in BoringSSL.

Ref: nodejs/node#65602

* fix(patch): fix shared buffer growability validation

Ref: nodejs/node#65845

* chore: update patches (trivial only)

* node#65820: src: fix null pointer call when running without a startup snapshot

SnapshotData::AsEmbedderWrapper() was removed. Both call sites wrap the
embedded snapshot, so use EmbedderSnapshotData::BuiltinSnapshotData().

Ref: nodejs/node#65820

* node#65407: src: apply IsolateSettings when using a snapshot

node::CreateEnvironment() no longer installs the per-isolate message
listener when it builds the environment from a snapshot, so stop
compensating for that and let SetIsolateUpForNode() add it.

Ref: nodejs/node#65407

* test: drop removed wasm rab integration flag from webidl buffer source test

Chromium's V8 removed --experimental-wasm-rab-integration after shipping
it; the new test-internal-webidl-buffer-source.js passes it.

Ref: nodejs/node#65845
Ref: https://chromium-review.googlesource.com/c/v8/v8/+/7708297

* chore: remove obsolete TLS external-memory accounting patch

Upstream moved the SecureContext external-memory Increase() into Init()
and guards the Decrease() on ctx_, so the leak this patch fixed is gone.
The patch's removal of that guard now double-decrements when v24.22.0's
TLSSocket closes a single-use context before the wrapper is destroyed,
tripping V8's ExternalMemoryAccounter DCHECK in every TLS test. Already
dropped on main in #53524.

* test: skip new rmSync permission error test when the Node suite runs as root

test-fs-rmSync-special-char-additional-error.js is new in v24.22.0 and
relies on a read-only directory blocking removal, which root bypasses;
the Linux Node.js test job runs as root.

Ref: nodejs/node#64453

---------

Co-authored-by: electron-roller[bot] <84116207+electron-roller[bot]@users.noreply.github.com>
Co-authored-by: Sam Attard <sattard@anthropic.com>
MarshallOfSound added a commit to electron/electron that referenced this pull request Oct 15, 2026
@electron-roller @MarshallOfSound
chore: bump node to v24.22.0 (45-x-y) (#55005)
33f217a 
* chore: bump node in DEPS to v24.22.0

* fix(patch): enable the V8 sandbox in shared-cage builds

Upstream now enables the V8 sandbox only for shared-cage builds. Keep
Electron's behaviour of enabling it whenever pointer compression is on,
matching Chromium's V8. The unofficial.gni x86 hunk landed upstream.

Ref: nodejs/node#62237
Ref: nodejs/node#65491

* fix(patch): use names for asymmetric key algorithms

Upstream dropped the BoringSSL guard in DhKeyGenTraits::Setup(), removed
ReadASN1Element() from ncrypto, and no longer includes <openssl/evp.h>
from env.h, so those hunks are no longer needed.

Ref: nodejs/node#65966
Ref: nodejs/node#66108
Ref: nodejs/node#65484

* fix(patch): skip RSA-PSS keygen deprecation tests with BoringSSL

The skip is now upstream.

Ref: nodejs/node#65808

* fix(patch): detach cppgc wrappers from their Realm before it is freed

Upstream's CppgcWrapperList::Cleanup() now pops nodes itself and the
wrapper owns and frees its list node, so the local PopFront/delete hunk
is dropped.

Ref: nodejs/node#65778

* fix(patch): gate jspi flag on V8_ENABLE_WEBASSEMBLY

Ref: nodejs/node#66082

* chore: remove upstreamed patches

- nodejs/node#63985
- nodejs/node#65630
- nodejs/node#64453
- nodejs/node#65778

* chore: update patches (trivial only)

* chore: update filenames.auto.gni

* fix(patch): discover hashes from OpenSSL providers

ncrypto's DigestCache::aliases() now has a function-local static, so
ncrypto needs the no_exit_time_destructors config too.

Ref: nodejs/node#65484

* fix(patch): read the peer certificate chain without consuming it

sk_X509_num() returns size_t in BoringSSL.

Ref: nodejs/node#65602

* fix(patch): fix shared buffer growability validation

Ref: nodejs/node#65845

* chore: update patches (trivial only)

* node#65820: src: fix null pointer call when running without a startup snapshot

SnapshotData::AsEmbedderWrapper() was removed. Both call sites wrap the
embedded snapshot, so use EmbedderSnapshotData::BuiltinSnapshotData().

Ref: nodejs/node#65820

* node#65407: src: apply IsolateSettings when using a snapshot

node::CreateEnvironment() no longer installs the per-isolate message
listener when it builds the environment from a snapshot, so stop
compensating for that and let SetIsolateUpForNode() add it.

Ref: nodejs/node#65407

* test: drop removed wasm rab integration flag from webidl buffer source test

Chromium's V8 removed --experimental-wasm-rab-integration after shipping
it; the new test-internal-webidl-buffer-source.js passes it.

Ref: nodejs/node#65845
Ref: https://chromium-review.googlesource.com/c/v8/v8/+/7708297

* test: skip new rmSync permission error test when the Node suite runs as root

test-fs-rmSync-special-char-additional-error.js is new in v24.22.0 and
relies on a read-only directory blocking removal, which root bypasses;
the Linux Node.js test job runs as root.

Ref: nodejs/node#64453

---------

Co-authored-by: electron-roller[bot] <84116207+electron-roller[bot]@users.noreply.github.com>
Co-authored-by: Sam Attard <sattard@anthropic.com>
MarshallOfSound added a commit to electron/electron that referenced this pull request Oct 15, 2026
@electron-roller @MarshallOfSound
chore: bump node to v24.22.0 (43-x-y) (#55003)
6bb4a9f 
* chore: bump node in DEPS to v24.22.0

* fix(patch): enable the V8 sandbox in shared-cage builds

Upstream now enables the V8 sandbox only for shared-cage builds. Keep
Electron's behaviour of enabling it whenever pointer compression is on,
matching Chromium's V8. The unofficial.gni x86 hunk landed upstream.

Ref: nodejs/node#62237
Ref: nodejs/node#65491

* fix(patch): use names for asymmetric key algorithms

Upstream dropped the BoringSSL guard in DhKeyGenTraits::Setup(), removed
ReadASN1Element() from ncrypto, and no longer includes <openssl/evp.h>
from env.h, so those hunks are no longer needed.

Ref: nodejs/node#65966
Ref: nodejs/node#66108
Ref: nodejs/node#65484

* fix(patch): skip RSA-PSS keygen deprecation tests with BoringSSL

The skip is now upstream.

Ref: nodejs/node#65808

* fix(patch): detach cppgc wrappers from their Realm before it is freed

Upstream's CppgcWrapperList::Cleanup() now pops nodes itself and the
wrapper owns and frees its list node, so the local PopFront/delete hunk
is dropped.

Ref: nodejs/node#65778

* fix(patch): gate jspi flag on V8_ENABLE_WEBASSEMBLY

Ref: nodejs/node#66082

* chore: remove upstreamed patches

- nodejs/node#63985
- nodejs/node#65630
- nodejs/node#64453
- nodejs/node#65778

* chore: update patches (trivial only)

* chore: update filenames.auto.gni

* fix(patch): discover hashes from OpenSSL providers

ncrypto's DigestCache::aliases() now has a function-local static, so
ncrypto needs the no_exit_time_destructors config too.

Ref: nodejs/node#65484

* fix(patch): read the peer certificate chain without consuming it

sk_X509_num() returns size_t in BoringSSL.

Ref: nodejs/node#65602

* chore: update patches (trivial only)

* node#65820: src: fix null pointer call when running without a startup snapshot

SnapshotData::AsEmbedderWrapper() was removed. Both call sites wrap the
embedded snapshot, so use EmbedderSnapshotData::BuiltinSnapshotData().

Ref: nodejs/node#65820

* node#65407: src: apply IsolateSettings when using a snapshot

node::CreateEnvironment() no longer installs the per-isolate message
listener when it builds the environment from a snapshot, so stop
compensating for that and let SetIsolateUpForNode() add it.

Ref: nodejs/node#65407

* test: drop removed wasm rab integration flag from webidl buffer source test

Chromium's V8 removed --experimental-wasm-rab-integration after shipping
it; the new test-internal-webidl-buffer-source.js passes it.

Ref: nodejs/node#65845
Ref: https://chromium-review.googlesource.com/c/v8/v8/+/7708297

* chore: remove obsolete TLS external-memory accounting patch

Upstream moved the SecureContext external-memory Increase() into Init()
and guards the Decrease() on ctx_, so the leak this patch fixed is gone.
The patch's removal of that guard now double-decrements when v24.22.0's
TLSSocket closes a single-use context before the wrapper is destroyed,
tripping V8's ExternalMemoryAccounter DCHECK in every TLS test. Already
dropped on main in #53524.

* test: skip new rmSync permission error test when the Node suite runs as root

test-fs-rmSync-special-char-additional-error.js is new in v24.22.0 and
relies on a read-only directory blocking removal, which root bypasses;
the Linux Node.js test job runs as root.

Ref: nodejs/node#64453

---------

Co-authored-by: electron-roller[bot] <84116207+electron-roller[bot]@users.noreply.github.com>
Co-authored-by: Sam Attard <sattard@anthropic.com>
MarshallOfSound added a commit to electron/electron that referenced this pull request Oct 15, 2026
@electron-roller @MarshallOfSound
chore: bump node to v24.22.0 (main) (#55006)
1f3d86b 
* chore: bump node in DEPS to v24.22.0

* fix(patch): enable the V8 sandbox in shared-cage builds

Upstream now enables the V8 sandbox only for shared-cage builds. Keep
Electron's behaviour of enabling it whenever pointer compression is on,
matching Chromium's V8. The unofficial.gni x86 hunk landed upstream.

Ref: nodejs/node#62237
Ref: nodejs/node#65491

* fix(patch): use names for asymmetric key algorithms

Upstream dropped the BoringSSL guard in DhKeyGenTraits::Setup(), removed
ReadASN1Element() from ncrypto, and no longer includes <openssl/evp.h>
from env.h, so those hunks are no longer needed.

Ref: nodejs/node#65966
Ref: nodejs/node#66108
Ref: nodejs/node#65484

* fix(patch): skip RSA-PSS keygen deprecation tests with BoringSSL

The skip is now upstream.

Ref: nodejs/node#65808

* fix(patch): detach cppgc wrappers from their Realm before it is freed

Upstream's CppgcWrapperList::Cleanup() now pops nodes itself and the
wrapper owns and frees its list node, so the local PopFront/delete hunk
is dropped.

Ref: nodejs/node#65778

* fix(patch): gate jspi flag on V8_ENABLE_WEBASSEMBLY

Ref: nodejs/node#66082

* chore: remove upstreamed patches

- nodejs/node#63985
- nodejs/node#65630
- nodejs/node#64453
- nodejs/node#65778

* chore: update patches (trivial only)

* chore: update filenames.auto.gni

* fix(patch): discover hashes from OpenSSL providers

ncrypto's DigestCache::aliases() now has a function-local static, so
ncrypto needs the no_exit_time_destructors config too.

Ref: nodejs/node#65484

* fix(patch): read the peer certificate chain without consuming it

sk_X509_num() returns size_t in BoringSSL.

Ref: nodejs/node#65602

* fix(patch): fix shared buffer growability validation

Ref: nodejs/node#65845

* chore: update patches (trivial only)

* node#65820: src: fix null pointer call when running without a startup snapshot

SnapshotData::AsEmbedderWrapper() was removed. Both call sites wrap the
embedded snapshot, so use EmbedderSnapshotData::BuiltinSnapshotData().

Ref: nodejs/node#65820

* node#65407: src: apply IsolateSettings when using a snapshot

node::CreateEnvironment() no longer installs the per-isolate message
listener when it builds the environment from a snapshot, so stop
compensating for that and let SetIsolateUpForNode() add it.

Ref: nodejs/node#65407

* test: drop removed wasm rab integration flag from webidl buffer source test

Chromium's V8 removed --experimental-wasm-rab-integration after shipping
it; the new test-internal-webidl-buffer-source.js passes it.

Ref: nodejs/node#65845
Ref: https://chromium-review.googlesource.com/c/v8/v8/+/7708297

* test: skip new rmSync permission error test when the Node suite runs as root

test-fs-rmSync-special-char-additional-error.js is new in v24.22.0 and
relies on a read-only directory blocking removal, which root bypasses;
the Linux Node.js test job runs as root.

Ref: nodejs/node#64453

---------

Co-authored-by: electron-roller[bot] <84116207+electron-roller[bot]@users.noreply.github.com>
Co-authored-by: Sam Attard <sattard@anthropic.com>
@claude claude Bot mentioned this pull request Oct 16, 2026
Merged
3 of 4 tasks
MarshallOfSound pushed a commit to electron/electron that referenced this pull request Oct 18, 2026
@claude @claude
test: re-enable Node.js tests that now pass with BoringSSL (#55071)
bcc5c51 
* test: re-enable Node.js tests that now pass with BoringSSL

Most of these were disabled because BoringSSL behaved differently from
OpenSSL. Upstream Node.js made the tests BoringSSL-aware in
nodejs/node#63161 (v24.18.0) and fixed the ML-KEM expectations in
nodejs/node#65966 (v24.22.0), so they now pass.

The es-module/test-esm-wasm entry is a stale prefix: test.py matches
entries as substrings of the path, so it was hiding 13 split files that
pass. A few entries are dropped because the tests now skip themselves.

parallel/test-cluster-primary-error, parallel/test-cluster-primary-kill,
parallel/test-diagnostics-channel-memory-leak and
parallel/test-worker-resource-limits move to the flaky list instead.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CfxP4tDxnGgFhy1kPesp3M

* test: keep two node tests disabled that crash on the testing build

test-vm-compile-function-lineoffset hits a V8 Smi::IsValid debug check and test-domain-error-types segfaults under --stress-compaction.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CfxP4tDxnGgFhy1kPesp3M

---------

Co-authored-by: Claude <noreply@anthropic.com>
markharding added a commit to futo-org/Harbor that referenced this pull request Oct 19, 2026
@markharding
Update Node.js to v24.22.0 (#1833)
7e9c1d2 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [node](https://nodejs.org) ([source](https://github.com/nodejs/node)) | minor | `24.18.0` → `24.22.0` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/99) for more information.

---

### Release Notes

<details>
<summary>nodejs/node (node)</summary>

### [`v24.22.0`](https://github.com/nodejs/node/releases/tag/v24.22.0): 2026-10-14, Version 24.22.0 'Krypton' (LTS), @&#8203;richardlau prepared by @&#8203;aduh95

[Compare Source](https://github.com/nodejs/node/compare/v24.21.0...v24.22.0)

##### Notable Changes

- \[[`ddbf974b47`](https://github.com/nodejs/node/commit/ddbf974b47)] - **(SEMVER-MINOR)** **crypto**: add `crypto.parsePKCS12()` (Brian Muenzenmeyer) [#&#8203;65627](https://github.com/nodejs/node/pull/65627)
- \[[`c162c68ff0`](https://github.com/nodejs/node/commit/c162c68ff0)] - **(SEMVER-MINOR)** **crypto**: add a generic MAC API (Filip Skokan) [#&#8203;65553](https://github.com/nodejs/node/pull/65553)
- \[[`a4ab3d84d7`](https://github.com/nodejs/node/commit/a4ab3d84d7)] - **(SEMVER-MINOR)** **crypto**: discover ciphers from OpenSSL providers (Filip Skokan) [#&#8203;65484](https://github.com/nodejs/node/pull/65484)
- \[[`c2f1e829ea`](https://github.com/nodejs/node/commit/c2f1e829ea)] - **(SEMVER-MINOR)** **crypto**: discover hashes from OpenSSL providers (Filip Skokan) [#&#8203;65484](https://github.com/nodejs/node/pull/65484)
- \[[`51aad5a80d`](https://github.com/nodejs/node/commit/51aad5a80d)] - **(SEMVER-MINOR)** **crypto**: enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) [#&#8203;63411](https://github.com/nodejs/node/pull/63411)
- \[[`d11c65d2f2`](https://github.com/nodejs/node/commit/d11c65d2f2)] - **doc**: add araujogui to collaborators (Guilherme Araújo) [#&#8203;66090](https://github.com/nodejs/node/pull/66090)
- \[[`acc1578179`](https://github.com/nodejs/node/commit/acc1578179)] - **doc**: deprecate `Server.prototype._listen2` in `node:net` (Antoine du Hamel) [#&#8203;65593](https://github.com/nodejs/node/pull/65593)
- \[[`a7f8de6362`](https://github.com/nodejs/node/commit/a7f8de6362)] - **(SEMVER-MINOR)** **net**: support sending `net.BoundSocket` to threads and child processes (Guy Bedford) [#&#8203;64725](https://github.com/nodejs/node/pull/64725)
- \[[`60c3eb61bd`](https://github.com/nodejs/node/commit/60c3eb61bd)] - **(SEMVER-MINOR)** **perf_hooks**: implement `SlidingWindowHistogram` (James M Snell) [#&#8203;65825](https://github.com/nodejs/node/pull/65825)
- \[[`6b3e6f9d5c`](https://github.com/nodejs/node/commit/6b3e6f9d5c)] - **(SEMVER-MINOR)** **perf_hooks**: implement qrde analysis support in Histogram (James M Snell) [#&#8203;65806](https://github.com/nodejs/node/pull/65806)
- \[[`75456a3512`](https://github.com/nodejs/node/commit/75456a3512)] - **(SEMVER-MINOR)** **perf_hooks**: implement Histogram `meanCI` API (James M Snell) [#&#8203;65606](https://github.com/nodejs/node/pull/65606)
- \[[`72d1b40c56`](https://github.com/nodejs/node/commit/72d1b40c56)] - **(SEMVER-MINOR)** **perf_hooks**: add CBOR export/import for histogram exchange (James M Snell) [#&#8203;65434](https://github.com/nodejs/node/pull/65434)
- \[[`41161dda87`](https://github.com/nodejs/node/commit/41161dda87)] - **(SEMVER-MINOR)** **sqlite**: add `StatementSync.prototype.close()` (Guilherme Araújo) [#&#8203;64232](https://github.com/nodejs/node/pull/64232)
- \[[`adbc757d70`](https://github.com/nodejs/node/commit/adbc757d70)] - **(SEMVER-MINOR)** **sqlite**: add `StatementSync.prototype[Symbol.dispose]()` (Guilherme Araújo) [#&#8203;64232](https://github.com/nodejs/node/pull/64232)
- \[[`241339f072`](https://github.com/nodejs/node/commit/241339f072)] - **(SEMVER-MINOR)** **src,lib**: add `util.markPromiseAsHandled` (James M Snell) [#&#8203;65805](https://github.com/nodejs/node/pull/65805)
- \[[`63b0974d9e`](https://github.com/nodejs/node/commit/63b0974d9e)] - **(SEMVER-MINOR)** **util**: implement `util.throttle` (James M Snell) [#&#8203;65899](https://github.com/nodejs/node/pull/65899)
- \[[`a3bbb5a26f`](https://github.com/nodejs/node/commit/a3bbb5a26f)] - **(SEMVER-MINOR)** **util**: implement `debounce` (James M Snell) [#&#8203;65899](https://github.com/nodejs/node/pull/65899)

##### Commits

- \[[`e6832b2cb1`](https://github.com/nodejs/node/commit/e6832b2cb1)] - **assert**: fix TypeError on deepStrictEqual with null Map key or Set member (Sergey Sannikov) [#&#8203;64449](https://github.com/nodejs/node/pull/64449)
- \[[`a079177d9f`](https://github.com/nodejs/node/commit/a079177d9f)] - **benchmark**: add --csv option to compare.js with --analyze (James M Snell) [#&#8203;65922](https://github.com/nodejs/node/pull/65922)
- \[[`10b1a0f70f`](https://github.com/nodejs/node/commit/10b1a0f70f)] - **benchmark**: fix max-regressions detection in compare.js (James M Snell) [#&#8203;65587](https://github.com/nodejs/node/pull/65587)
- \[[`e0c7ba8ad5`](https://github.com/nodejs/node/commit/e0c7ba8ad5)] - **benchmark**: add --analyze option to benchmark/scatter.js (James M Snell) [#&#8203;65594](https://github.com/nodejs/node/pull/65594)
- \[[`21fed10bb0`](https://github.com/nodejs/node/commit/21fed10bb0)] - **benchmark**: add crypto class benchmarks (Filip Skokan) [#&#8203;65518](https://github.com/nodejs/node/pull/65518)
- \[[`fa912242b7`](https://github.com/nodejs/node/commit/fa912242b7)] - **buffer**: fix unaligned UTF-16LE decoding (Matteo Collina) [#&#8203;65905](https://github.com/nodejs/node/pull/65905)
- \[[`a6bd0c1413`](https://github.com/nodejs/node/commit/a6bd0c1413)] - **build**: suppress OpenSSL asm warnings with clang (Richard Lau) [#&#8203;66023](https://github.com/nodejs/node/pull/66023)
- \[[`94e12139ee`](https://github.com/nodejs/node/commit/94e12139ee)] - **build**: derive V8_LOGGING_LEVEL from dcheck_always_on (Joyee Cheung) [#&#8203;65744](https://github.com/nodejs/node/pull/65744)
- \[[`7a2f322943`](https://github.com/nodejs/node/commit/7a2f322943)] - **build**: fix quiet default for make builds (Shelley Vohr) [#&#8203;65826](https://github.com/nodejs/node/pull/65826)
- \[[`c280d650b0`](https://github.com/nodejs/node/commit/c280d650b0)] - **build**: allow linking shared dependencies in the GN build (Shelley Vohr) [#&#8203;65797](https://github.com/nodejs/node/pull/65797)
- \[[`4b23a4472c`](https://github.com/nodejs/node/commit/4b23a4472c)] - **build**: enable the V8 sandbox in shared-cage builds (Shelley Vohr) [#&#8203;62237](https://github.com/nodejs/node/pull/62237)
- \[[`676e15c003`](https://github.com/nodejs/node/commit/676e15c003)] - **build**: define V8_CONTIGUOUS_COMPRESSED_RO_SPACE for shared cage (Shelley Vohr) [#&#8203;65464](https://github.com/nodejs/node/pull/65464)
- \[[`f784058482`](https://github.com/nodejs/node/commit/f784058482)] - **build**: remove obsolete configure flags (Chengzhong Wu) [#&#8203;65456](https://github.com/nodejs/node/pull/65456)
- \[[`f63f37d243`](https://github.com/nodejs/node/commit/f63f37d243)] - **build**: activate correct default flags for riscv64 (Stewart X Addison) [#&#8203;65708](https://github.com/nodejs/node/pull/65708)
- \[[`da46ac075d`](https://github.com/nodejs/node/commit/da46ac075d)] - **build**: derive NODE_ARCH from target_cpu in the GN build (Shelley Vohr) [#&#8203;65491](https://github.com/nodejs/node/pull/65491)
- \[[`249e9a16dd`](https://github.com/nodejs/node/commit/249e9a16dd)] - **build,src**: gate jspi flag on V8_ENABLE_WEBASSEMBLY (Piotr Kubaj) [#&#8203;66082](https://github.com/nodejs/node/pull/66082)
- \[[`146f00f64b`](https://github.com/nodejs/node/commit/146f00f64b)] - **child_process**: clear timeout timer on spawn-time error too (kishore280) [#&#8203;65506](https://github.com/nodejs/node/pull/65506)
- \[[`13987f4418`](https://github.com/nodejs/node/commit/13987f4418)] - **crypto**: remove redundent `std::move` call (Antoine du Hamel) [#&#8203;66111](https://github.com/nodejs/node/pull/66111)
- \[[`ef957ac85f`](https://github.com/nodejs/node/commit/ef957ac85f)] - **crypto**: skip private RSA parameters in key details (Filip Skokan) [#&#8203;66108](https://github.com/nodejs/node/pull/66108)
- \[[`8feccc5e22`](https://github.com/nodejs/node/commit/8feccc5e22)] - **crypto**: use provider EC group names (Filip Skokan) [#&#8203;66108](https://github.com/nodejs/node/pull/66108)
- \[[`764e0d1120`](https://github.com/nodejs/node/commit/764e0d1120)] - **crypto**: fetch ciphers for private-key encoding (Filip Skokan) [#&#8203;66108](https://github.com/nodejs/node/pull/66108)
- \[[`50ffed1979`](https://github.com/nodejs/node/commit/50ffed1979)] - **crypto**: decode [PKCS#1](https://github.com/PKCS/node/issues/1) keys through providers (Filip Skokan) [#&#8203;66108](https://github.com/nodejs/node/pull/66108)
- \[[`56c16b2fd6`](https://github.com/nodejs/node/commit/56c16b2fd6)] - **crypto**: derive keys through EVP_KDF (Filip Skokan) [#&#8203;66108](https://github.com/nodejs/node/pull/66108)
- \[[`a4effe6809`](https://github.com/nodejs/node/commit/a4effe6809)] - **crypto**: use names for asymmetric key algorithms (Filip Skokan) [#&#8203;65966](https://github.com/nodejs/node/pull/65966)
- \[[`ddbf974b47`](https://github.com/nodejs/node/commit/ddbf974b47)] - **(SEMVER-MINOR)** **crypto**: add crypto.parsePKCS12() (Brian Muenzenmeyer) [#&#8203;65627](https://github.com/nodejs/node/pull/65627)
- \[[`8e631aa48f`](https://github.com/nodejs/node/commit/8e631aa48f)] - **crypto**: add Hybrid KEMs to Web Cryptography (Filip Skokan) [#&#8203;65759](https://github.com/nodejs/node/pull/65759)
- \[[`5c51129e16`](https://github.com/nodejs/node/commit/5c51129e16)] - **crypto**: optimize private EC JWK import (Filip Skokan) [#&#8203;65908](https://github.com/nodejs/node/pull/65908)
- \[[`c2ec40c2d7`](https://github.com/nodejs/node/commit/c2ec40c2d7)] - **crypto**: disable non-FIPS WebCrypto paths in FIPS mode (Filip Skokan) [#&#8203;65172](https://github.com/nodejs/node/pull/65172)
- \[[`e198aa0f79`](https://github.com/nodejs/node/commit/e198aa0f79)] - **crypto**: read RSA-PSS restrictions from provider (Filip Skokan) [#&#8203;66108](https://github.com/nodejs/node/pull/66108)
- \[[`253784f0e9`](https://github.com/nodejs/node/commit/253784f0e9)] - **crypto**: optimize and benchmark key preparation (Filip Skokan) [#&#8203;65892](https://github.com/nodejs/node/pull/65892)
- \[[`80a6ad509b`](https://github.com/nodejs/node/commit/80a6ad509b)] - **crypto**: avoid EC reconstruction for signature sizing (Filip Skokan) [#&#8203;65908](https://github.com/nodejs/node/pull/65908)
- \[[`5b592b772c`](https://github.com/nodejs/node/commit/5b592b772c)] - **crypto**: avoid EC raw export reconstruction (Filip Skokan) [#&#8203;65908](https://github.com/nodejs/node/pull/65908)
- \[[`ee956ae3bf`](https://github.com/nodejs/node/commit/ee956ae3bf)] - **crypto**: export EC JWK coordinates directly (Filip Skokan) [#&#8203;65908](https://github.com/nodejs/node/pull/65908)
- \[[`684008be58`](https://github.com/nodejs/node/commit/684008be58)] - **crypto**: read EC curve metadata directly (Filip Skokan) [#&#8203;65908](https://github.com/nodejs/node/pull/65908)
- \[[`f4665f1c41`](https://github.com/nodejs/node/commit/f4665f1c41)] - **crypto**: validate the limit of PBKDF2 iterations (Filip Skokan) [#&#8203;65704](https://github.com/nodejs/node/pull/65704)
- \[[`624abbecd7`](https://github.com/nodejs/node/commit/624abbecd7)] - **crypto**: use primordials in HKDF info validation (Filip Skokan) [#&#8203;65704](https://github.com/nodejs/node/pull/65704)
- \[[`e4d916f175`](https://github.com/nodejs/node/commit/e4d916f175)] - **crypto**: add mgf1Hash for RSA-OAEP (Adam Mcgrath) [#&#8203;65073](https://github.com/nodejs/node/pull/65073)
- \[[`db8a9162a8`](https://github.com/nodejs/node/commit/db8a9162a8)] - **crypto**: fix multi-prime RSA JWKs (Filip Skokan) [#&#8203;65649](https://github.com/nodejs/node/pull/65649)
- \[[`022ac83504`](https://github.com/nodejs/node/commit/022ac83504)] - **crypto**: cache valid ECDH key pairs (Filip Skokan) [#&#8203;65615](https://github.com/nodejs/node/pull/65615)
- \[[`c61953ebcc`](https://github.com/nodejs/node/commit/c61953ebcc)] - **crypto**: add strict mode to --force-fips (Filip Skokan) [#&#8203;65645](https://github.com/nodejs/node/pull/65645)
- \[[`db6ea132a5`](https://github.com/nodejs/node/commit/db6ea132a5)] - **crypto**: add FIPS indicator diagnostics channel (Filip Skokan) [#&#8203;65645](https://github.com/nodejs/node/pull/65645)
- \[[`c162c68ff0`](https://github.com/nodejs/node/commit/c162c68ff0)] - **(SEMVER-MINOR)** **crypto**: add a generic MAC API (Filip Skokan) [#&#8203;65553](https://github.com/nodejs/node/pull/65553)
- \[[`2b62aafd20`](https://github.com/nodejs/node/commit/2b62aafd20)] - **crypto**: validate JWK usages before key_ops (Filip Skokan) [#&#8203;65550](https://github.com/nodejs/node/pull/65550)
- \[[`ec7819db69`](https://github.com/nodejs/node/commit/ec7819db69)] - **crypto**: fix RSA-PSS oversized salt handling (Filip Skokan) [#&#8203;65550](https://github.com/nodejs/node/pull/65550)
- \[[`a4ab3d84d7`](https://github.com/nodejs/node/commit/a4ab3d84d7)] - **(SEMVER-MINOR)** **crypto**: discover ciphers from OpenSSL providers (Filip Skokan) [#&#8203;65484](https://github.com/nodejs/node/pull/65484)
- \[[`c2f1e829ea`](https://github.com/nodejs/node/commit/c2f1e829ea)] - **(SEMVER-MINOR)** **crypto**: discover hashes from OpenSSL providers (Filip Skokan) [#&#8203;65484](https://github.com/nodejs/node/pull/65484)
- \[[`51aad5a80d`](https://github.com/nodejs/node/commit/51aad5a80d)] - **(SEMVER-MINOR)** **crypto**: enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) [#&#8203;63411](https://github.com/nodejs/node/pull/63411)
- \[[`5a46a9acbb`](https://github.com/nodejs/node/commit/5a46a9acbb)] - **crypto**: improve SubtleCrypto.supports() accuracy (Filip Skokan) [#&#8203;65222](https://github.com/nodejs/node/pull/65222)
- \[[`191ebfb26c`](https://github.com/nodejs/node/commit/191ebfb26c)] - **crypto**: fix public PKCS8 export error (한국) [#&#8203;65609](https://github.com/nodejs/node/pull/65609)
- \[[`b6d7ed372b`](https://github.com/nodejs/node/commit/b6d7ed372b)] - **crypto**: fix private SPKI export error (Filip Skokan) [#&#8203;65550](https://github.com/nodejs/node/pull/65550)
- \[[`79509c25a4`](https://github.com/nodejs/node/commit/79509c25a4)] - **crypto**: correct CCM decryption FIPS error message (kyungrae) [#&#8203;65450](https://github.com/nodejs/node/pull/65450)
- \[[`9adc87bc16`](https://github.com/nodejs/node/commit/9adc87bc16)] - **crypto**: harden X509Certificate state (Filip Skokan) [#&#8203;65518](https://github.com/nodejs/node/pull/65518)
- \[[`c63aa331b4`](https://github.com/nodejs/node/commit/c63aa331b4)] - **crypto**: optimize key slot caching (Filip Skokan) [#&#8203;65518](https://github.com/nodejs/node/pull/65518)
- \[[`87daea43a7`](https://github.com/nodejs/node/commit/87daea43a7)] - **crypto**: add null checks for OPENSSL_INIT_new() (Nora Dossche) [#&#8203;63457](https://github.com/nodejs/node/pull/63457)
- \[[`98ca5e9358`](https://github.com/nodejs/node/commit/98ca5e9358)] - **crypto**: prevent Hmac.digest() from returning uninitialized memory (Matteo Collina) [#&#8203;65112](https://github.com/nodejs/node/pull/65112)
- \[[`0c090a28cd`](https://github.com/nodejs/node/commit/0c090a28cd)] - **crypto**: avoid throwing CryptoKey brand checks (Filip Skokan) [#&#8203;65503](https://github.com/nodejs/node/pull/65503)
- \[[`a13cc3f723`](https://github.com/nodejs/node/commit/a13cc3f723)] - **crypto**: avoid throwing KeyObject brand checks (Filip Skokan) [#&#8203;65503](https://github.com/nodejs/node/pull/65503)
- \[[`b8db0045ef`](https://github.com/nodejs/node/commit/b8db0045ef)] - **deps**: V8: cherry-pick [`ea9c016`](https://github.com/nodejs/node/commit/ea9c016f26ad) (Gundepalli Sravani) [#&#8203;66570](https://github.com/nodejs/node/pull/66570)
- \[[`ba09b53487`](https://github.com/nodejs/node/commit/ba09b53487)] - **deps**: V8: backport [`c355350`](https://github.com/nodejs/node/commit/c3553509f460) (Jakob Linke) [#&#8203;66089](https://github.com/nodejs/node/pull/66089)
- \[[`9ce8ef405b`](https://github.com/nodejs/node/commit/9ce8ef405b)] - **deps**: V8: backport [`8901c79`](https://github.com/nodejs/node/commit/8901c793e439) (Toon Verwaest) [#&#8203;66089](https://github.com/nodejs/node/pull/66089)
- \[[`fb0d0ca289`](https://github.com/nodejs/node/commit/fb0d0ca289)] - **deps**: V8: backport [`0b94a9f`](https://github.com/nodejs/node/commit/0b94a9fd23ba) (Ruan Gustavo) [#&#8203;65753](https://github.com/nodejs/node/pull/65753)
- \[[`2faca508c0`](https://github.com/nodejs/node/commit/2faca508c0)] - **deps**: update googletest to [`8eff9e3`](https://github.com/nodejs/node/commit/8eff9e336692fc95961e096564f1044c600b881d) (Node.js GitHub Bot) [#&#8203;66009](https://github.com/nodejs/node/pull/66009)
- \[[`4396c9bffe`](https://github.com/nodejs/node/commit/4396c9bffe)] - **deps**: update googletest to [`283c175`](https://github.com/nodejs/node/commit/283c17563fe7a1111cd7f581aa5d541e8baeff2f) (Node.js GitHub Bot) [#&#8203;65833](https://github.com/nodejs/node/pull/65833)
- \[[`8a5b12570c`](https://github.com/nodejs/node/commit/8a5b12570c)] - **deps**: update simdjson to 4.6.11 (Node.js GitHub Bot) [#&#8203;65834](https://github.com/nodejs/node/pull/65834)
- \[[`c47feb09e8`](https://github.com/nodejs/node/commit/c47feb09e8)] - **deps**: update zlib to 1.3.2.1-motley-285e94b (Node.js GitHub Bot) [#&#8203;65835](https://github.com/nodejs/node/pull/65835)
- \[[`9f0d905286`](https://github.com/nodejs/node/commit/9f0d905286)] - **deps**: upgrade npm to 11.19.1 (npm team) [#&#8203;65573](https://github.com/nodejs/node/pull/65573)
- \[[`373cd332d8`](https://github.com/nodejs/node/commit/373cd332d8)] - **deps**: update googletest to [`36ba75f`](https://github.com/nodejs/node/commit/36ba75f0ad5383a9759f17f3f72fd4661c72cb6d) (Node.js GitHub Bot) [#&#8203;65654](https://github.com/nodejs/node/pull/65654)
- \[[`aeed6132a7`](https://github.com/nodejs/node/commit/aeed6132a7)] - **deps**: update simdjson to 4.6.9 (Node.js GitHub Bot) [#&#8203;65655](https://github.com/nodejs/node/pull/65655)
- \[[`2583571342`](https://github.com/nodejs/node/commit/2583571342)] - **deps**: update zlib to 1.3.2.1-motley-5eb4d7e (Node.js GitHub Bot) [#&#8203;65494](https://github.com/nodejs/node/pull/65494)
- \[[`d11c65d2f2`](https://github.com/nodejs/node/commit/d11c65d2f2)] - **doc**: add araujogui to collaborators (Guilherme Araújo) [#&#8203;66090](https://github.com/nodejs/node/pull/66090)
- \[[`0a4a8d602a`](https://github.com/nodejs/node/commit/0a4a8d602a)] - **doc**: fix duplicate 'the' typo in `node_platform.cc` (Muhammad Al-Muzahid) [#&#8203;66058](https://github.com/nodejs/node/pull/66058)
- \[[`b6538138ef`](https://github.com/nodejs/node/commit/b6538138ef)] - **doc**: clarify sub-1000ms behavior in socket.setKeepAlive (Haram Jeong) [#&#8203;65869](https://github.com/nodejs/node/pull/65869)
- \[[`d319fa7de4`](https://github.com/nodejs/node/commit/d319fa7de4)] - **doc**: remove obsolete mentioning of cl.exe on windows (Chengzhong Wu) [#&#8203;66038](https://github.com/nodejs/node/pull/66038)
- \[[`67cb305b59`](https://github.com/nodejs/node/commit/67cb305b59)] - **doc**: note that default signal handling resets the signal mask (Shelley Vohr) [#&#8203;65877](https://github.com/nodejs/node/pull/65877)
- \[[`160d44e025`](https://github.com/nodejs/node/commit/160d44e025)] - **doc**: clarify QUIC async write backpressure (John Finnerty) [#&#8203;65947](https://github.com/nodejs/node/pull/65947)
- \[[`ffd47a7ee5`](https://github.com/nodejs/node/commit/ffd47a7ee5)] - **doc**: clarify permission model scope for output paths (Rafael Gonzaga) [#&#8203;66004](https://github.com/nodejs/node/pull/66004)
- \[[`2e1772a8ab`](https://github.com/nodejs/node/commit/2e1772a8ab)] - **doc**: fill in missing zstd docs (James M Snell) [#&#8203;65867](https://github.com/nodejs/node/pull/65867)
- \[[`9f88c6f8dc`](https://github.com/nodejs/node/commit/9f88c6f8dc)] - **doc**: add inoway46 as triager (Yuya Inoue) [#&#8203;65565](https://github.com/nodejs/node/pull/65565)
- \[[`c2620d01f3`](https://github.com/nodejs/node/commit/c2620d01f3)] - **doc**: document windowsHide for child_process.fork (Christopher Buss) [#&#8203;65887](https://github.com/nodejs/node/pull/65887)
- \[[`6076111e1a`](https://github.com/nodejs/node/commit/6076111e1a)] - **doc**: qualify directory read ordering for native fs (Trivikram Kamat) [#&#8203;65868](https://github.com/nodejs/node/pull/65868)
- \[[`7bf048a336`](https://github.com/nodejs/node/commit/7bf048a336)] - **doc**: add DOMException section to errors API reference (Avocado) [#&#8203;65206](https://github.com/nodejs/node/pull/65206)
- \[[`414b6bfa62`](https://github.com/nodejs/node/commit/414b6bfa62)] - **doc**: expand revert commit collaborator instructions (Mike McCready) [#&#8203;65848](https://github.com/nodejs/node/pull/65848)
- \[[`c8ac91692c`](https://github.com/nodejs/node/commit/c8ac91692c)] - **doc**: note that FreeEnvironment() runs a shared event loop (Shelley Vohr) [#&#8203;65691](https://github.com/nodejs/node/pull/65691)
- \[[`cc47cc0983`](https://github.com/nodejs/node/commit/cc47cc0983)] - **doc**: clarify security triage dispositions and permission boundaries (Rafael Gonzaga) [#&#8203;65436](https://github.com/nodejs/node/pull/65436)
- \[[`8b79a71e78`](https://github.com/nodejs/node/commit/8b79a71e78)] - **doc**: fix default limit of maxHeadersCount (Aryn H) [#&#8203;65472](https://github.com/nodejs/node/pull/65472)
- \[[`56b1252a54`](https://github.com/nodejs/node/commit/56b1252a54)] - **doc**: fix return types for sync methods (Chiang Fong Lee) [#&#8203;58575](https://github.com/nodejs/node/pull/58575)
- \[[`da0d32a333`](https://github.com/nodejs/node/commit/da0d32a333)] - **doc**: document REPL DEP0185 throws and uncaught-exception behavior (Adrián Estrada) [#&#8203;64993](https://github.com/nodejs/node/pull/64993)
- \[[`f8ab3619b6`](https://github.com/nodejs/node/commit/f8ab3619b6)] - **doc**: document close() error when in a sqlite callback (Trivikram Kamat) [#&#8203;65090](https://github.com/nodejs/node/pull/65090)
- \[[`131f1db302`](https://github.com/nodejs/node/commit/131f1db302)] - **doc**: clarify return type of `fs.mkdtemp*` (Antoine du Hamel) [#&#8203;65743](https://github.com/nodejs/node/pull/65743)
- \[[`7755e98183`](https://github.com/nodejs/node/commit/7755e98183)] - **doc**: update `changelog-maker` instructions for releasing (Juan José) [#&#8203;65707](https://github.com/nodejs/node/pull/65707)
- \[[`f982a53433`](https://github.com/nodejs/node/commit/f982a53433)] - **doc**: add stability status to `crypto.setEngine` (Antoine du Hamel) [#&#8203;65746](https://github.com/nodejs/node/pull/65746)
- \[[`17be003f7c`](https://github.com/nodejs/node/commit/17be003f7c)] - **doc**: remove outdated TLS authorized warning (Tim Perry) [#&#8203;65597](https://github.com/nodejs/node/pull/65597)
- \[[`424002232d`](https://github.com/nodejs/node/commit/424002232d)] - **doc**: fix stale TOC in maintaining-dependencies (greenhead) [#&#8203;65523](https://github.com/nodejs/node/pull/65523)
- \[[`dddb9b57a5`](https://github.com/nodejs/node/commit/dddb9b57a5)] - **doc**: refactor the AI guidelines (Joyee Cheung) [#&#8203;65269](https://github.com/nodejs/node/pull/65269)
- \[[`397b58e113`](https://github.com/nodejs/node/commit/397b58e113)] - **doc**: fix triggerAsyncId() comment in async_hooks example (soreavis) [#&#8203;64583](https://github.com/nodejs/node/pull/64583)
- \[[`338ec94d83`](https://github.com/nodejs/node/commit/338ec94d83)] - **doc**: fix fsPromises.watch overflow value (Matt Radbourne) [#&#8203;64605](https://github.com/nodejs/node/pull/64605)
- \[[`f18be21b14`](https://github.com/nodejs/node/commit/f18be21b14)] - **doc**: clarify stream direction in options.stdio note (Avocado) [#&#8203;65236](https://github.com/nodejs/node/pull/65236)
- \[[`f07c6acd8b`](https://github.com/nodejs/node/commit/f07c6acd8b)] - **doc**: clarify signal listener behavior (Som Samantray) [#&#8203;65243](https://github.com/nodejs/node/pull/65243)
- \[[`8bc17b0c7a`](https://github.com/nodejs/node/commit/8bc17b0c7a)] - **doc**: add test reporter event lifecycle diagram (sangwook) [#&#8203;63780](https://github.com/nodejs/node/pull/63780)
- \[[`452e7477d4`](https://github.com/nodejs/node/commit/452e7477d4)] - **doc**: discourage AbortSignal cleanup for long-lived resources (Efe Karasakal) [#&#8203;64342](https://github.com/nodejs/node/pull/64342)
- \[[`acc1578179`](https://github.com/nodejs/node/commit/acc1578179)] - **doc**: deprecate `Server.prototype._listen2` in `node:net` (Antoine du Hamel) [#&#8203;65593](https://github.com/nodejs/node/pull/65593)
- \[[`e7ed4361d6`](https://github.com/nodejs/node/commit/e7ed4361d6)] - **doc,test**: account for OpenSSL 4.1 behaviours (Filip Skokan) [#&#8203;65956](https://github.com/nodejs/node/pull/65956)
- \[[`c65fafeab4`](https://github.com/nodejs/node/commit/c65fafeab4)] - **errors**: validate constructor name (Christian Aurich) [#&#8203;65607](https://github.com/nodejs/node/pull/65607)
- \[[`f6b47938b7`](https://github.com/nodejs/node/commit/f6b47938b7)] - **events**: fix weak listener retention overwrite (Aryan) [#&#8203;64024](https://github.com/nodejs/node/pull/64024)
- \[[`a27db42c3e`](https://github.com/nodejs/node/commit/a27db42c3e)] - **fs**: coerce FileHandle.read length like fs.read (Xia Chao) [#&#8203;65521](https://github.com/nodejs/node/pull/65521)
- \[[`f3019b522a`](https://github.com/nodejs/node/commit/f3019b522a)] - **fs**: throw on existing dir in cpSync with errorOnExist (Daijiro Wachi) [#&#8203;64124](https://github.com/nodejs/node/pull/64124)
- \[[`cd1011458f`](https://github.com/nodejs/node/commit/cd1011458f)] - **fs**: support removing read-only files in rmSync on Windows (Sparsh :)) [#&#8203;64453](https://github.com/nodejs/node/pull/64453)
- \[[`d659dd8cd8`](https://github.com/nodejs/node/commit/d659dd8cd8)] - **fs**: give directories created by cpSync the source directory's mode (Shelley Vohr) [#&#8203;65488](https://github.com/nodejs/node/pull/65488)
- \[[`1dfb047293`](https://github.com/nodejs/node/commit/1dfb047293)] - **fs**: handle recursive watch setup races (Filip Skokan) [#&#8203;65699](https://github.com/nodejs/node/pull/65699)
- \[[`bc431c8413`](https://github.com/nodejs/node/commit/bc431c8413)] - **fs**: apply nocase to literal glob exclude patterns (Yusuke Hayashi) [#&#8203;64817](https://github.com/nodejs/node/pull/64817)
- \[[`dd5662e641`](https://github.com/nodejs/node/commit/dd5662e641)] - **fs**: do not descend into symlinks for \*\* unless following symlinks (RafaelGSS) [#&#8203;65435](https://github.com/nodejs/node/pull/65435)
- \[[`ac4cf54292`](https://github.com/nodejs/node/commit/ac4cf54292)] - **fs**: watch directories, not files, in recursive fs.watch fallback (Shelley Vohr) [#&#8203;65486](https://github.com/nodejs/node/pull/65486)
- \[[`7804bfbd71`](https://github.com/nodejs/node/commit/7804bfbd71)] - **fs**: preserve directory timestamps in cp (Abhinandan Kumar) [#&#8203;65540](https://github.com/nodejs/node/pull/65540)
- \[[`ba5ca5a1a5`](https://github.com/nodejs/node/commit/ba5ca5a1a5)] - **fs**: fix recursive watch error handling (Filip Skokan) [#&#8203;65635](https://github.com/nodejs/node/pull/65635)
- \[[`b71c4c0551`](https://github.com/nodejs/node/commit/b71c4c0551)] - **fs**: fix rmSync error messages for non-ASCII paths (Yeaseen) [#&#8203;61233](https://github.com/nodejs/node/pull/61233)
- \[[`53b4700892`](https://github.com/nodejs/node/commit/53b4700892)] - **http**: don't destroy socket after request completes (Barath Raj) [#&#8203;65952](https://github.com/nodejs/node/pull/65952)
- \[[`96d4c23f17`](https://github.com/nodejs/node/commit/96d4c23f17)] - **http**: fast-forward teardown of unread messages (Matteo Collina) [#&#8203;65732](https://github.com/nodejs/node/pull/65732)
- \[[`742b4bf5a6`](https://github.com/nodejs/node/commit/742b4bf5a6)] - **http**: coalesce chunked writes during auto-corking (GetThatCookie) [#&#8203;64987](https://github.com/nodejs/node/pull/64987)
- \[[`8921108175`](https://github.com/nodejs/node/commit/8921108175)] - **http2**: settle pending write callbacks on destroy (Matteo Collina) [#&#8203;66016](https://github.com/nodejs/node/pull/66016)
- \[[`9a2f77a3fc`](https://github.com/nodejs/node/commit/9a2f77a3fc)] - **http2**: fix onread assert when destroying session from stream handler (Sankalp Thakur) [#&#8203;65116](https://github.com/nodejs/node/pull/65116)
- \[[`99e41eb43a`](https://github.com/nodejs/node/commit/99e41eb43a)] - **http2**: error for incomplete reads on RST, auto-drain, deprecate aborted (Tim Perry) [#&#8203;63249](https://github.com/nodejs/node/pull/63249)
- \[[`d520b9601c`](https://github.com/nodejs/node/commit/d520b9601c)] - **http2**: fix write deadlock exposed by larger window sizes (Tim Perry) [#&#8203;65440](https://github.com/nodejs/node/pull/65440)
- \[[`86b2497aae`](https://github.com/nodejs/node/commit/86b2497aae)] - **http2**: fix async context loss when trailers carry END_STREAM (Orgad Shaneh) [#&#8203;63814](https://github.com/nodejs/node/pull/63814)
- \[[`536ccc7daf`](https://github.com/nodejs/node/commit/536ccc7daf)] - **https**: limit proxy CONNECT response headers (Matteo Collina) [#&#8203;64545](https://github.com/nodejs/node/pull/64545)
- \[[`fe6147832b`](https://github.com/nodejs/node/commit/fe6147832b)] - **inspector**: fix abort when two Environments own the inspector (Shelley Vohr) [#&#8203;65877](https://github.com/nodejs/node/pull/65877)
- \[[`843a27782a`](https://github.com/nodejs/node/commit/843a27782a)] - **inspector**: fix crash when the IsolateData has no platform (Shelley Vohr) [#&#8203;65818](https://github.com/nodejs/node/pull/65818)
- \[[`3f0b6d3308`](https://github.com/nodejs/node/commit/3f0b6d3308)] - **lib**: avoid repeat internal receiver checks (Filip Skokan) [#&#8203;65910](https://github.com/nodejs/node/pull/65910)
- \[[`0039479b4a`](https://github.com/nodejs/node/commit/0039479b4a)] - **lib**: fix shared buffer growability validation (Filip Skokan) [#&#8203;65845](https://github.com/nodejs/node/pull/65845)
- \[[`e7907130ae`](https://github.com/nodejs/node/commit/e7907130ae)] - **lib**: use Web IDL interface brand checks (Filip Skokan) [#&#8203;65846](https://github.com/nodejs/node/pull/65846)
- \[[`7ae085552b`](https://github.com/nodejs/node/commit/7ae085552b)] - **lib**: fix AbortSignal.any() abort propagation (Yuya Inoue) [#&#8203;66014](https://github.com/nodejs/node/pull/66014)
- \[[`01032f4fdc`](https://github.com/nodejs/node/commit/01032f4fdc)] - **lib**: fix for FileHandle.readableWebStream (Patrick Dähne) [#&#8203;58842](https://github.com/nodejs/node/pull/58842)
- \[[`60a9a28206`](https://github.com/nodejs/node/commit/60a9a28206)] - **lib**: avoid unsafe array iteration in cli table (Donghoon Kang) [#&#8203;65838](https://github.com/nodejs/node/pull/65838)
- \[[`230a7fcef0`](https://github.com/nodejs/node/commit/230a7fcef0)] - **lib**: optimize internal Web IDL dictionaries (Filip Skokan) [#&#8203;65857](https://github.com/nodejs/node/pull/65857)
- \[[`7cc02b14ec`](https://github.com/nodejs/node/commit/7cc02b14ec)] - **lib**: validate sequence iterator objects (Filip Skokan) [#&#8203;65844](https://github.com/nodejs/node/pull/65844)
- \[[`c2bb3aeccc`](https://github.com/nodejs/node/commit/c2bb3aeccc)] - **lib**: defer source map payload decoding until first use (Shelley Vohr) [#&#8203;65490](https://github.com/nodejs/node/pull/65490)
- \[[`c4b390cf17`](https://github.com/nodejs/node/commit/c4b390cf17)] - **lib**: optimize async context frame activation (Tim Perry) [#&#8203;65519](https://github.com/nodejs/node/pull/65519)
- \[[`3e4fc50a4f`](https://github.com/nodejs/node/commit/3e4fc50a4f)] - **lib**: use validateArray for array arguments (JunHwan Choi) [#&#8203;65344](https://github.com/nodejs/node/pull/65344)
- \[[`b351ac9cd4`](https://github.com/nodejs/node/commit/b351ac9cd4)] - **meta**: bump step-security/harden-runner from 2.21.0 to 2.21.1 (dependabot\[bot]) [#&#8203;66044](https://github.com/nodejs/node/pull/66044)
- \[[`693e890fec`](https://github.com/nodejs/node/commit/693e890fec)] - **meta**: bump github/codeql-action/upload-sarif from 4.37.9 to 4.38.0 (dependabot\[bot]) [#&#8203;66046](https://github.com/nodejs/node/pull/66046)
- \[[`9c2abc13c2`](https://github.com/nodejs/node/commit/9c2abc13c2)] - **meta**: bump github/codeql-action/init from 4.37.9 to 4.38.0 (dependabot\[bot]) [#&#8203;66048](https://github.com/nodejs/node/pull/66048)
- \[[`b3c5c2b91d`](https://github.com/nodejs/node/commit/b3c5c2b91d)] - **meta**: bump github/codeql-action/analyze from 4.37.9 to 4.38.0 (dependabot\[bot]) [#&#8203;66049](https://github.com/nodejs/node/pull/66049)
- \[[`2428b13b02`](https://github.com/nodejs/node/commit/2428b13b02)] - **meta**: bump github/codeql-action/autobuild from 4.37.9 to 4.38.0 (dependabot\[bot]) [#&#8203;66050](https://github.com/nodejs/node/pull/66050)
- \[[`eff5d15041`](https://github.com/nodejs/node/commit/eff5d15041)] - **meta**: add joyeecheung as v8 currency strategic initiative champion (Joyee Cheung) [#&#8203;65965](https://github.com/nodejs/node/pull/65965)
- \[[`aa549fed0d`](https://github.com/nodejs/node/commit/aa549fed0d)] - **meta**: expand on collaborator restoration process (Chengzhong Wu) [#&#8203;65962](https://github.com/nodejs/node/pull/65962)
- \[[`593b40eb2b`](https://github.com/nodejs/node/commit/593b40eb2b)] - **meta**: add web-standards as webidl owners (Filip Skokan) [#&#8203;65856](https://github.com/nodejs/node/pull/65856)
- \[[`e711d3fef3`](https://github.com/nodejs/node/commit/e711d3fef3)] - **meta**: bump actions/checkout from 7.0.0 to 7.0.1 (dependabot\[bot]) [#&#8203;65718](https://github.com/nodejs/node/pull/65718)
- \[[`0fc8a38f5b`](https://github.com/nodejs/node/commit/0fc8a38f5b)] - **meta**: cleanup targos emeritus changes (Antoine du Hamel) [#&#8203;65738](https://github.com/nodejs/node/pull/65738)
- \[[`2ca2fd566d`](https://github.com/nodejs/node/commit/2ca2fd566d)] - **meta**: bump github/codeql-action/init from 4.37.3 to 4.37.9 (dependabot\[bot]) [#&#8203;65714](https://github.com/nodejs/node/pull/65714)
- \[[`325709818e`](https://github.com/nodejs/node/commit/325709818e)] - **meta**: bump github/codeql-action/autobuild from 4.37.3 to 4.37.9 (dependabot\[bot]) [#&#8203;65717](https://github.com/nodejs/node/pull/65717)
- \[[`8481d22f72`](https://github.com/nodejs/node/commit/8481d22f72)] - **meta**: bump actions/setup-node from 6.4.0 to 7.0.0 (dependabot\[bot]) [#&#8203;65720](https://github.com/nodejs/node/pull/65720)
- \[[`cd2bd5d9fd`](https://github.com/nodejs/node/commit/cd2bd5d9fd)] - **meta**: bump step-security/harden-runner from 2.20.0 to 2.21.0 (dependabot\[bot]) [#&#8203;65721](https://github.com/nodejs/node/pull/65721)
- \[[`fdec747105`](https://github.com/nodejs/node/commit/fdec747105)] - **meta**: bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.9 (dependabot\[bot]) [#&#8203;65722](https://github.com/nodejs/node/pull/65722)
- \[[`34c2fca088`](https://github.com/nodejs/node/commit/34c2fca088)] - **meta**: bump github/codeql-action/analyze from 4.37.3 to 4.37.9 (dependabot\[bot]) [#&#8203;65723](https://github.com/nodejs/node/pull/65723)
- \[[`46d4549938`](https://github.com/nodejs/node/commit/46d4549938)] - **meta**: document collaborator automation (Filip Skokan) [#&#8203;65671](https://github.com/nodejs/node/pull/65671)
- \[[`a7f8de6362`](https://github.com/nodejs/node/commit/a7f8de6362)] - **(SEMVER-MINOR)** **net**: support sending net.BoundSocket to threads and child processes (Guy Bedford) [#&#8203;64725](https://github.com/nodejs/node/pull/64725)
- \[[`466f1f8e62`](https://github.com/nodejs/node/commit/466f1f8e62)] - **net**: fix BlockList.fromJSON for IPv4-mapped IPv6 rules (Daijiro Wachi) [#&#8203;64125](https://github.com/nodejs/node/pull/64125)
- \[[`cd04cb10d6`](https://github.com/nodejs/node/commit/cd04cb10d6)] - **net**: recognize bare IPv6 loopback addresses in isLoopback (Daijiro Wachi) [#&#8203;63619](https://github.com/nodejs/node/pull/63619)
- \[[`d983942636`](https://github.com/nodejs/node/commit/d983942636)] - **node-api**: make object property arrays const (Yilong Li) [#&#8203;65621](https://github.com/nodejs/node/pull/65621)
- \[[`cc124394cc`](https://github.com/nodejs/node/commit/cc124394cc)] - **path**: remove `StringPrototypeCharCodeAt` from some methods of `posix` (Wiyeong Seo) [#&#8203;54668](https://github.com/nodejs/node/pull/54668)
- \[[`60c3eb61bd`](https://github.com/nodejs/node/commit/60c3eb61bd)] - **(SEMVER-MINOR)** **perf_hooks**: implement SlidingWindowHistogram (James M Snell) [#&#8203;65825](https://github.com/nodejs/node/pull/65825)
- \[[`6b3e6f9d5c`](https://github.com/nodejs/node/commit/6b3e6f9d5c)] - **(SEMVER-MINOR)** **perf_hooks**: implement qrde analysis support in Histogram (James M Snell) [#&#8203;65806](https://github.com/nodejs/node/pull/65806)
- \[[`8aa870940c`](https://github.com/nodejs/node/commit/8aa870940c)] - **perf_hooks**: reuse buffer for uv metrics (Donghoon Kang) [#&#8203;65985](https://github.com/nodejs/node/pull/65985)
- \[[`9cfbfae660`](https://github.com/nodejs/node/commit/9cfbfae660)] - **perf_hooks**: validate import normalization offset (Matteo Collina) [#&#8203;65950](https://github.com/nodejs/node/pull/65950)
- \[[`75456a3512`](https://github.com/nodejs/node/commit/75456a3512)] - **(SEMVER-MINOR)** **perf_hooks**: implement Histogram meanCI API (James M Snell) [#&#8203;65606](https://github.com/nodejs/node/pull/65606)
- \[[`127cb31864`](https://github.com/nodejs/node/commit/127cb31864)] - **perf_hooks**: add missing resource timing attributes (greenhead) [#&#8203;65017](https://github.com/nodejs/node/pull/65017)
- \[[`72d1b40c56`](https://github.com/nodejs/node/commit/72d1b40c56)] - **(SEMVER-MINOR)** **perf_hooks**: add CBOR export/import for histogram exchange (James M Snell) [#&#8203;65434](https://github.com/nodejs/node/pull/65434)
- \[[`847fe4d049`](https://github.com/nodejs/node/commit/847fe4d049)] - **permission**: block FileHandle fsync and fdatasync (Rafael Gonzaga) [#&#8203;65431](https://github.com/nodejs/node/pull/65431)
- \[[`fa9188bd63`](https://github.com/nodejs/node/commit/fa9188bd63)] - **quic**: fix two small bugs in HTTP/3 stream internals (Tim Perry) [#&#8203;65970](https://github.com/nodejs/node/pull/65970)
- \[[`ee80beaa9f`](https://github.com/nodejs/node/commit/ee80beaa9f)] - **quic**: fix crash in onStreamClose (Marten Richter) [#&#8203;65861](https://github.com/nodejs/node/pull/65861)
- \[[`98486dd764`](https://github.com/nodejs/node/commit/98486dd764)] - **quic**: reject zero addressLRUSize (Christian Aurich) [#&#8203;65827](https://github.com/nodejs/node/pull/65827)
- \[[`97516fc256`](https://github.com/nodejs/node/commit/97516fc256)] - **quic**: stop guarding ngtcp2_recv_stop_sending callback field (René) [#&#8203;65688](https://github.com/nodejs/node/pull/65688)
- \[[`024bef25eb`](https://github.com/nodejs/node/commit/024bef25eb)] - **quic**: remove unused fin flag from blob reader wakeup (trivenay) [#&#8203;65315](https://github.com/nodejs/node/pull/65315)
- \[[`5468337456`](https://github.com/nodejs/node/commit/5468337456)] - **quic**: release stream arenas before cleanup (Trivikram Kamat) [#&#8203;65410](https://github.com/nodejs/node/pull/65410)
- \[[`a794e36970`](https://github.com/nodejs/node/commit/a794e36970)] - **sqlite**: throw on invalid URL path instead of abort (Guilherme Araújo) [#&#8203;66026](https://github.com/nodejs/node/pull/66026)
- \[[`f58a55b8d0`](https://github.com/nodejs/node/commit/f58a55b8d0)] - **sqlite**: add diagnostic channel (Guilherme Araújo) [#&#8203;62241](https://github.com/nodejs/node/pull/62241)
- \[[`be849bc6af`](https://github.com/nodejs/node/commit/be849bc6af)] - **sqlite**: reject connection access from authorizer callbacks (Trevor Burnham) [#&#8203;65156](https://github.com/nodejs/node/pull/65156)
- \[[`41161dda87`](https://github.com/nodejs/node/commit/41161dda87)] - **(SEMVER-MINOR)** **sqlite**: add StatementSync.prototype.close() (Guilherme Araújo) [#&#8203;64232](https://github.com/nodejs/node/pull/64232)
- \[[`adbc757d70`](https://github.com/nodejs/node/commit/adbc757d70)] - **(SEMVER-MINOR)** **sqlite**: add StatementSync.prototype\[Symbol.dispose]\() (Guilherme Araújo) [#&#8203;64232](https://github.com/nodejs/node/pull/64232)
- \[[`b7b18fdbc9`](https://github.com/nodejs/node/commit/b7b18fdbc9)] - **sqlite**: run backup completion in callback scope (Filip Skokan) [#&#8203;65666](https://github.com/nodejs/node/pull/65666)
- \[[`59827acd7f`](https://github.com/nodejs/node/commit/59827acd7f)] - **sqlite**: isolate applyChangeset filter errors (Trivikram Kamat) [#&#8203;64823](https://github.com/nodejs/node/pull/64823)
- \[[`5a01df2d15`](https://github.com/nodejs/node/commit/5a01df2d15)] - **sqlite**: reject deserialize() while in a callback (Trivikram Kamat) [#&#8203;64796](https://github.com/nodejs/node/pull/64796)
- \[[`c9b6e75a2e`](https://github.com/nodejs/node/commit/c9b6e75a2e)] - **sqlite**: refactor error helpers and user function pointers (Ali Hassan) [#&#8203;62794](https://github.com/nodejs/node/pull/62794)
- \[[`d4eb6c62a9`](https://github.com/nodejs/node/commit/d4eb6c62a9)] - **sqlite**: prevent database close during callbacks (Matteo Collina) [#&#8203;64743](https://github.com/nodejs/node/pull/64743)
- \[[`83b3431c25`](https://github.com/nodejs/node/commit/83b3431c25)] - **src**: detach cppgc wrappers from their Realm before it is freed (Shelley Vohr) [#&#8203;65778](https://github.com/nodejs/node/pull/65778)
- \[[`13ed7e35e7`](https://github.com/nodejs/node/commit/13ed7e35e7)] - **src**: list scripts when `--run` has no command (James Ross) [#&#8203;64606](https://github.com/nodejs/node/pull/64606)
- \[[`0f62f2b2df`](https://github.com/nodejs/node/commit/0f62f2b2df)] - **src**: print exception thrown during primordial initialization (Joyee Cheung) [#&#8203;65991](https://github.com/nodejs/node/pull/65991)
- \[[`70117640f7`](https://github.com/nodejs/node/commit/70117640f7)] - **src**: don't kill own process group on failed spawn (Lazizbek Ergashev) [#&#8203;65054](https://github.com/nodejs/node/pull/65054)
- \[[`64649abfd4`](https://github.com/nodejs/node/commit/64649abfd4)] - **src**: keep the first snapshot blob alive for later isolates (Shelley Vohr) [#&#8203;65779](https://github.com/nodejs/node/pull/65779)
- \[[`3c814e8c3c`](https://github.com/nodejs/node/commit/3c814e8c3c)] - **src**: fix Stop() terminating the next Environment on the isolate (Shelley Vohr) [#&#8203;65819](https://github.com/nodejs/node/pull/65819)
- \[[`a3ababcebb`](https://github.com/nodejs/node/commit/a3ababcebb)] - **src**: fix null pointer call when running without a startup snapshot (Shelley Vohr) [#&#8203;65820](https://github.com/nodejs/node/pull/65820)
- \[[`7331f5cfcc`](https://github.com/nodejs/node/commit/7331f5cfcc)] - **src**: stop leaking a CppHeap in CommonEnvironmentSetup (Shelley Vohr) [#&#8203;65792](https://github.com/nodejs/node/pull/65792)
- \[[`5570a84048`](https://github.com/nodejs/node/commit/5570a84048)] - **src**: fix use-after-free in CleanupHookThunkRun (Caleb Everett) [#&#8203;65630](https://github.com/nodejs/node/pull/65630)
- \[[`abe1b673e9`](https://github.com/nodejs/node/commit/abe1b673e9)] - **src**: keep global list of addon-provided cleanup hooks (Anna Henningsen) [#&#8203;63985](https://github.com/nodejs/node/pull/63985)
- \[[`2203ac9382`](https://github.com/nodejs/node/commit/2203ac9382)] - **src**: fix startup snapshot reproducibility of InternalFieldInfo (Chengzhong Wu) [#&#8203;65684](https://github.com/nodejs/node/pull/65684)
- \[[`b282765d99`](https://github.com/nodejs/node/commit/b282765d99)] - **src**: fix live lock between environments with blocked requests (Ilyas Shabi) [#&#8203;65520](https://github.com/nodejs/node/pull/65520)
- \[[`61ca3ba93c`](https://github.com/nodejs/node/commit/61ca3ba93c)] - **src**: apply IsolateSettings when using a snapshot (Shelley Vohr) [#&#8203;65407](https://github.com/nodejs/node/pull/65407)
- \[[`33b8d6e10f`](https://github.com/nodejs/node/commit/33b8d6e10f)] - **src**: add re-entrancy guard to TriggerUncaughtException (Temuulen Undrakhbayar) [#&#8203;64327](https://github.com/nodejs/node/pull/64327)
- \[[`49232db71e`](https://github.com/nodejs/node/commit/49232db71e)] - **src**: reuse cached strings in CompileSerializeMain (agape1225) [#&#8203;65453](https://github.com/nodejs/node/pull/65453)
- \[[`e3f52b80a5`](https://github.com/nodejs/node/commit/e3f52b80a5)] - **src**: report libuv error when openAsBlob cannot stat (Paul Bouchon) [#&#8203;65517](https://github.com/nodejs/node/pull/65517)
- \[[`42a5a19027`](https://github.com/nodejs/node/commit/42a5a19027)] - **src**: shave about 20 bytes off each TLSWrap instance (James M Snell) [#&#8203;65144](https://github.com/nodejs/node/pull/65144)
- \[[`a06bb51e22`](https://github.com/nodejs/node/commit/a06bb51e22)] - **src**: use UTF-8 for task runner filesystem paths (Archkon) [#&#8203;64868](https://github.com/nodejs/node/pull/64868)
- \[[`241339f072`](https://github.com/nodejs/node/commit/241339f072)] - **(SEMVER-MINOR)** **src,lib**: add util.markPromiseAsHandled (James M Snell) [#&#8203;65805](https://github.com/nodejs/node/pull/65805)
- \[[`1260642ace`](https://github.com/nodejs/node/commit/1260642ace)] - **stream**: destroy Duplex.from async function on early return (Aman Chadha(IVIXMMI)) [#&#8203;65963](https://github.com/nodejs/node/pull/65963)
- \[[`5f06defdbd`](https://github.com/nodejs/node/commit/5f06defdbd)] - **stream**: make share budget failures detach before throwing (James M Snell) [#&#8203;66028](https://github.com/nodejs/node/pull/66028)
- \[[`d1c60d898d`](https://github.com/nodejs/node/commit/d1c60d898d)] - **stream**: update broadcast to retain buffered data with zero consumers (James M Snell) [#&#8203;66028](https://github.com/nodejs/node/pull/66028)
- \[[`bbb00558c5`](https://github.com/nodejs/node/commit/bbb00558c5)] - **stream**: avoid promise allocation for parked transform writes (Matteo Collina) [#&#8203;65625](https://github.com/nodejs/node/pull/65625)
- \[[`3216bc3912`](https://github.com/nodejs/node/commit/3216bc3912)] - **stream**: keep webstream stream states in fast-mode objects (Matteo Collina) [#&#8203;65625](https://github.com/nodejs/node/pull/65625)
- \[[`70c1415686`](https://github.com/nodejs/node/commit/70c1415686)] - **stream**: reject closed only after sink abort settles (Lazizbek Ergashev) [#&#8203;65727](https://github.com/nodejs/node/pull/65727)
- \[[`f8737b8ee5`](https://github.com/nodejs/node/commit/f8737b8ee5)] - **stream**: fix ERR_INVALID_STATE when cancelling Readable.toWeb() (Richard Scarrott) [#&#8203;62773](https://github.com/nodejs/node/pull/62773)
- \[[`faa16f671c`](https://github.com/nodejs/node/commit/faa16f671c)] - **stream**: amortize writable buffer compaction (Gürgün Dayıoğlu) [#&#8203;65847](https://github.com/nodejs/node/pull/65847)
- \[[`6262e0b8c6`](https://github.com/nodejs/node/commit/6262e0b8c6)] - **stream**: create write request objects lazily (Matteo Collina) [#&#8203;64455](https://github.com/nodejs/node/pull/64455)
- \[[`0f0566de15`](https://github.com/nodejs/node/commit/0f0566de15)] - **stream**: allocate stream read buffers from a slab (Matteo Collina) [#&#8203;64455](https://github.com/nodejs/node/pull/64455)
- \[[`02c776a7c6`](https://github.com/nodejs/node/commit/02c776a7c6)] - **stream**: ensure that stateful transforms preserve this (James M Snell) [#&#8203;65658](https://github.com/nodejs/node/pull/65658)
- \[[`4b29051971`](https://github.com/nodejs/node/commit/4b29051971)] - **stream**: fix nested async flushing with infinite sources (James M Snell) [#&#8203;65658](https://github.com/nodejs/node/pull/65658)
- \[[`2e54186d97`](https://github.com/nodejs/node/commit/2e54186d97)] - **stream**: ensure from() observes returned rejecting promise correctly (James M Snell) [#&#8203;65658](https://github.com/nodejs/node/pull/65658)
- \[[`fd68d5ca6a`](https://github.com/nodejs/node/commit/fd68d5ca6a)] - **stream**: apply source normalization once at call time (James M Snell) [#&#8203;65658](https://github.com/nodejs/node/pull/65658)
- \[[`49ee85b462`](https://github.com/nodejs/node/commit/49ee85b462)] - **stream**: make pipeTo source normalization independent of Writer (James M Snell) [#&#8203;65658](https://github.com/nodejs/node/pull/65658)
- \[[`d7d0440f08`](https://github.com/nodejs/node/commit/d7d0440f08)] - **stream**: pre-aborted pipeTo now applies dest failure handling (James M Snell) [#&#8203;65658](https://github.com/nodejs/node/pull/65658)
- \[[`6d8e643ef3`](https://github.com/nodejs/node/commit/6d8e643ef3)] - **stream**: ensure async dispoal after endSync awaits for drain (James M Snell) [#&#8203;65658](https://github.com/nodejs/node/pull/65658)
- \[[`a082916c00`](https://github.com/nodejs/node/commit/a082916c00)] - **stream**: ensure factory signals remain active through closing (James M Snell) [#&#8203;65658](https://github.com/nodejs/node/pull/65658)
- \[[`38829295a7`](https://github.com/nodejs/node/commit/38829295a7)] - **stream**: skip unobserved 'readable' emission at EOF (Matteo Collina) [#&#8203;65749](https://github.com/nodejs/node/pull/65749)
- \[[`d535859c22`](https://github.com/nodejs/node/commit/d535859c22)] - **stream**: avoid per-chunk promises in webstream adapters (Matteo Collina) [#&#8203;65548](https://github.com/nodejs/node/pull/65548)
- \[[`80568f6818`](https://github.com/nodejs/node/commit/80568f6818)] - **stream**: address stream/iter review feedback (James M Snell) [#&#8203;65652](https://github.com/nodejs/node/pull/65652)
- \[[`6952928f68`](https://github.com/nodejs/node/commit/6952928f68)] - **stream**: replace object sentinel with symbol (James M Snell) [#&#8203;65652](https://github.com/nodejs/node/pull/65652)
- \[[`9c22c4124c`](https://github.com/nodejs/node/commit/9c22c4124c)] - **stream**: cancel active stream/iter pulls (James M Snell) [#&#8203;65652](https://github.com/nodejs/node/pull/65652)
- \[[`24d87990cf`](https://github.com/nodejs/node/commit/24d87990cf)] - **stream**: fix merge settlement tagging and falsy error tracking (James M Snell) [#&#8203;65652](https://github.com/nodejs/node/pull/65652)
- \[[`1e215c4b51`](https://github.com/nodejs/node/commit/1e215c4b51)] - **stream**: ensure full-close semantics when closed (James M Snell) [#&#8203;65652](https://github.com/nodejs/node/pull/65652)
- \[[`f499d6fadf`](https://github.com/nodejs/node/commit/f499d6fadf)] - **stream**: fixup writer to terminate on consumer return/throw (James M Snell) [#&#8203;65652](https://github.com/nodejs/node/pull/65652)
- \[[`2130738033`](https://github.com/nodejs/node/commit/2130738033)] - **stream**: ensure iterator cleanup on done, reject, etc (James M Snell) [#&#8203;65652](https://github.com/nodejs/node/pull/65652)
- \[[`748adc6275`](https://github.com/nodejs/node/commit/748adc6275)] - **stream**: fixup cancelation handling in pull() (James M Snell) [#&#8203;65652](https://github.com/nodejs/node/pull/65652)
- \[[`47b3f6a1fa`](https://github.com/nodejs/node/commit/47b3f6a1fa)] - **stream**: fix early drain after Utf8Stream reopen (Matteo Collina) [#&#8203;65633](https://github.com/nodejs/node/pull/65633)
- \[[`6dab5412cf`](https://github.com/nodejs/node/commit/6dab5412cf)] - **test**: skip RSA-PSS keygen deprecation tests with BoringSSL (Shelley Vohr) [#&#8203;65808](https://github.com/nodejs/node/pull/65808)
- \[[`95d9a25b61`](https://github.com/nodejs/node/commit/95d9a25b61)] - **test**: consolidate crypto provider cache coverage (Filip Skokan) [#&#8203;66108](https://github.com/nodejs/node/pull/66108)
- \[[`612db6d5b2`](https://github.com/nodejs/node/commit/612db6d5b2)] - **test**: deflake user timing WPT assertions (Filip Skokan) [#&#8203;66036](https://github.com/nodejs/node/pull/66036)
- \[[`61a73d31eb`](https://github.com/nodejs/node/commit/61a73d31eb)] - **test**: fix RSA/DSA wrong-passphrase flake (Filip Skokan) [#&#8203;65983](https://github.com/nodejs/node/pull/65983)
- \[[`d9f4a3ee3e`](https://github.com/nodejs/node/commit/d9f4a3ee3e)] - **test**: reuse fixed primes in DH tests (Filip Skokan) [#&#8203;65980](https://github.com/nodejs/node/pull/65980)
- \[[`a0fd0a8bd6`](https://github.com/nodejs/node/commit/a0fd0a8bd6)] - **test**: use named parameters in DH stress test (Filip Skokan) [#&#8203;65980](https://github.com/nodejs/node/pull/65980)
- \[[`810a6b00ee`](https://github.com/nodejs/node/commit/810a6b00ee)] - **test**: update tests to run with OpenSSL >= 3.0 FIPS mode (Filip Skokan) [#&#8203;64960](https://github.com/nodejs/node/pull/64960)
- \[[`dc6b9ba5b2`](https://github.com/nodejs/node/commit/dc6b9ba5b2)] - **test**: deflake test-run-watch-cwd-isolation-none-\* (Antoine du Hamel) [#&#8203;66035](https://github.com/nodejs/node/pull/66035)
- \[[`0f27bd2459`](https://github.com/nodejs/node/commit/0f27bd2459)] - **test**: unskip `test-watch-create-isolation-none` (Antoine du Hamel) [#&#8203;66041](https://github.com/nodejs/node/pull/66041)
- \[[`1019f624f3`](https://github.com/nodejs/node/commit/1019f624f3)] - **test**: deflake util.throttle tests (Filip Skokan) [#&#8203;66034](https://github.com/nodejs/node/pull/66034)
- \[[`b4a6719f37`](https://github.com/nodejs/node/commit/b4a6719f37)] - **(SEMVER-MINOR)** **test**: expand histogram test coverage (James M Snell) [#&#8203;65825](https://github.com/nodejs/node/pull/65825)
- \[[`047d7c53d2`](https://github.com/nodejs/node/commit/047d7c53d2)] - **test**: implement low-risk test optimizations (James M Snell) [#&#8203;65926](https://github.com/nodejs/node/pull/65926)
- \[[`33775d2bbb`](https://github.com/nodejs/node/commit/33775d2bbb)] - **test**: prevent parser reuse across close scenarios (Filip Skokan) [#&#8203;66017](https://github.com/nodejs/node/pull/66017)
- \[[`b8c5283cbc`](https://github.com/nodejs/node/commit/b8c5283cbc)] - **test**: fix stderr Buffer assertion in exec encoding test (greenhead) [#&#8203;66008](https://github.com/nodejs/node/pull/66008)
- \[[`13a2982002`](https://github.com/nodejs/node/commit/13a2982002)] - **test**: improve sequential test performance (James M Snell) [#&#8203;65928](https://github.com/nodejs/node/pull/65928)
- \[[`a578933da0`](https://github.com/nodejs/node/commit/a578933da0)] - **test**: overlap SLH-DSA signature checks (Filip Skokan) [#&#8203;65980](https://github.com/nodejs/node/pull/65980)
- \[[`bfdf20729d`](https://github.com/nodejs/node/commit/bfdf20729d)] - **test**: unref cancelled broadcast source timer (Filip Skokan) [#&#8203;65980](https://github.com/nodejs/node/pull/65980)
- \[[`b29154d471`](https://github.com/nodejs/node/commit/b29154d471)] - **test**: collect timeout signals explicitly (Filip Skokan) [#&#8203;65980](https://github.com/nodejs/node/pull/65980)
- \[[`384d4fe3ea`](https://github.com/nodejs/node/commit/384d4fe3ea)] - **test**: skip retries in DNS timeout coverage (Filip Skokan) [#&#8203;65980](https://github.com/nodejs/node/pull/65980)
- \[[`c7323843f4`](https://github.com/nodejs/node/commit/c7323843f4)] - **test**: synchronize ordered runner events (Filip Skokan) [#&#8203;65980](https://github.com/nodejs/node/pull/65980)
- \[[`625290573a`](https://github.com/nodejs/node/commit/625290573a)] - **test**: avoid idle HTTP/HTTPS connections (Filip Skokan) [#&#8203;65980](https://github.com/nodejs/node/pull/65980)
- \[[`2bde68398f`](https://github.com/nodejs/node/commit/2bde68398f)] - **test**: close WebAssembly test HTTP servers (Filip Skokan) [#&#8203;65980](https://github.com/nodejs/node/pull/65980)
- \[[`4c702e401b`](https://github.com/nodejs/node/commit/4c702e401b)] - **test**: deflake node-api test-free-called (Christian Aurich) [#&#8203;65948](https://github.com/nodejs/node/pull/65948)
- \[[`0b6d945ebc`](https://github.com/nodejs/node/commit/0b6d945ebc)] - **test**: skip C++ symbols in tick-processor-arguments (Philipp Dunkel) [#&#8203;65906](https://github.com/nodejs/node/pull/65906)
- \[[`e04210b383`](https://github.com/nodejs/node/commit/e04210b383)] - **test**: try fixing windows build replacing WMIC (James M Snell) [#&#8203;65949](https://github.com/nodejs/node/pull/65949)
- \[[`aed73444de`](https://github.com/nodejs/node/commit/aed73444de)] - **test**: fix flaky cleanup in http2 test (Tim Perry) [#&#8203;65701](https://github.com/nodejs/node/pull/65701)
- \[[`22f47ff728`](https://github.com/nodejs/node/commit/22f47ff728)] - **test**: update WPT WebCrypto, WebIDL and interfaces (Filip Skokan) [#&#8203;65679](https://github.com/nodejs/node/pull/65679)
- \[[`f2af511a24`](https://github.com/nodejs/node/commit/f2af511a24)] - **test**: zero-fill buffers before the string length limit check (Christian Aurich) [#&#8203;65755](https://github.com/nodejs/node/pull/65755)
- \[[`a28aad9960`](https://github.com/nodejs/node/commit/a28aad9960)] - **test**: update WPT for url to [`c23755a`](https://github.com/nodejs/node/commit/c23755a144) (Node.js GitHub Bot) [#&#8203;65651](https://github.com/nodejs/node/pull/65651)
- \[[`ba65bb149a`](https://github.com/nodejs/node/commit/ba65bb149a)] - **test**: fix recursive fs.watch error fixture (Filip Skokan) [#&#8203;65683](https://github.com/nodejs/node/pull/65683)
- \[[`f3b9f132b1`](https://github.com/nodejs/node/commit/f3b9f132b1)] - **test**: update streams WPT (Jeong SeokChan) [#&#8203;65638](https://github.com/nodejs/node/pull/65638)
- \[[`d2e0f2d3bd`](https://github.com/nodejs/node/commit/d2e0f2d3bd)] - **test**: deflake fastutf8stream destroy and reopen tests (Christian Aurich) [#&#8203;65554](https://github.com/nodejs/node/pull/65554)
- \[[`7b5896c136`](https://github.com/nodejs/node/commit/7b5896c136)] - **test**: cover Readable.from() sync iterator errors (jakecastelli) [#&#8203;65515](https://github.com/nodejs/node/pull/65515)
- \[[`66eafad642`](https://github.com/nodejs/node/commit/66eafad642)] - **test**: document WPT runner workflows (Filip Skokan) [#&#8203;65510](https://github.com/nodejs/node/pull/65510)
- \[[`2e2dc0f556`](https://github.com/nodejs/node/commit/2e2dc0f556)] - **test**: simplify test-worker-heap-profile.js (Donghoon Kang) [#&#8203;65372](https://github.com/nodejs/node/pull/65372)
- \[[`2e57caac46`](https://github.com/nodejs/node/commit/2e57caac46)] - **test**: prefer in-memory databases in sqlite tests (Paul Bouchon) [#&#8203;64701](https://github.com/nodejs/node/pull/64701)
- \[[`cef908596e`](https://github.com/nodejs/node/commit/cef908596e)] - **test**: fix typo from funciton to function (parkhojeong) [#&#8203;63403](https://github.com/nodejs/node/pull/63403)
- \[[`4c7bbd4182`](https://github.com/nodejs/node/commit/4c7bbd4182)] - **test**: widen the gap in the resolver maxTimeout comparison (Shelley Vohr) [#&#8203;65780](https://github.com/nodejs/node/pull/65780)
- \[[`25c81c9eff`](https://github.com/nodejs/node/commit/25c81c9eff)] - **test**: fix the thread-spawn handshake in the WASI threads fixture (Shelley Vohr) [#&#8203;65780](https://github.com/nodejs/node/pull/65780)
- \[[`cab5dcedbe`](https://github.com/nodejs/node/commit/cab5dcedbe)] - **test**: only count restarts after the write in watch emit-restarted test (Shelley Vohr) [#&#8203;65780](https://github.com/nodejs/node/pull/65780)
- \[[`db0ca93e94`](https://github.com/nodejs/node/commit/db0ca93e94)] - **test**: ignore tunnel resets in proxy invalid-char-in-url test (Shelley Vohr) [#&#8203;65780](https://github.com/nodejs/node/pull/65780)
- \[[`1f0087040a`](https://github.com/nodejs/node/commit/1f0087040a)] - **test**: handle EPIPE in closed channel test (Christian Aurich) [#&#8203;65770](https://github.com/nodejs/node/pull/65770)
- \[[`ed4e5df638`](https://github.com/nodejs/node/commit/ed4e5df638)] - **test**: deflake test-runner-coverage (Christian Aurich) [#&#8203;65728](https://github.com/nodejs/node/pull/65728)
- \[[`48ecb16909`](https://github.com/nodejs/node/commit/48ecb16909)] - **test**: set type=none on IBM i for empty source (Abdirahim Musse) [#&#8203;65545](https://github.com/nodejs/node/pull/65545)
- \[[`554a3fba98`](https://github.com/nodejs/node/commit/554a3fba98)] - **test**: deflake WASI poll timing checks (Filip Skokan) [#&#8203;65672](https://github.com/nodejs/node/pull/65672)
- \[[`91b5389430`](https://github.com/nodejs/node/commit/91b5389430)] - **test**: skip `fs-watch-recursive-delete-race` on AIX (Antoine du Hamel) [#&#8203;65698](https://github.com/nodejs/node/pull/65698)
- \[[`4ed0c8cc6c`](https://github.com/nodejs/node/commit/4ed0c8cc6c)] - **test**: deflake test-inspect-async-hook-setup-at-inspect (Christian Aurich) [#&#8203;65584](https://github.com/nodejs/node/pull/65584)
- \[[`500b98cc7d`](https://github.com/nodejs/node/commit/500b98cc7d)] - **test**: deflake test-watch-mode-restart-esm-loading-error (Christian Aurich) [#&#8203;65623](https://github.com/nodejs/node/pull/65623)
- \[[`099c20fcbd`](https://github.com/nodejs/node/commit/099c20fcbd)] - **test**: avoid orphaned child on Windows abort test (Kirill Saied) [#&#8203;65451](https://github.com/nodejs/node/pull/65451)
- \[[`fc9364fe55`](https://github.com/nodejs/node/commit/fc9364fe55)] - **test**: riscv64: skip node-api sea test (Stewart X Addison) [#&#8203;65569](https://github.com/nodejs/node/pull/65569)
- \[[`c9d6b5f731`](https://github.com/nodejs/node/commit/c9d6b5f731)] - **test**: mark platform-specific tests as flaky (Filip Skokan) [#&#8203;65562](https://github.com/nodejs/node/pull/65562)
- \[[`cb93d40549`](https://github.com/nodejs/node/commit/cb93d40549)] - **test,benchmark**: use OpenSSL feature helpers (Filip Skokan) [#&#8203;65762](https://github.com/nodejs/node/pull/65762)
- \[[`b4b859319d`](https://github.com/nodejs/node/commit/b4b859319d)] - **test_runner**: avoid reusing v8 serializers (Yuya Inoue) [#&#8203;65951](https://github.com/nodejs/node/pull/65951)
- \[[`b3766225e1`](https://github.com/nodejs/node/commit/b3766225e1)] - **test_runner**: fix quote escaping in JUnit (Jihwan) [#&#8203;65971](https://github.com/nodejs/node/pull/65971)
- \[[`ec37f934db`](https://github.com/nodejs/node/commit/ec37f934db)] - **tls**: propagate singleUse to the secure context (Carlos Vinicius) [#&#8203;66025](https://github.com/nodejs/node/pull/66025)
- \[[`21aec3f286`](https://github.com/nodejs/node/commit/21aec3f286)] - **tls**: defer re-entrant calls to SSL state machine from JS (Tim Perry) [#&#8203;65105](https://github.com/nodejs/node/pull/65105)
- \[[`ffd3de2831`](https://github.com/nodejs/node/commit/ffd3de2831)] - **tls**: read the peer certificate chain without consuming it (Tony Gies) [#&#8203;65602](https://github.com/nodejs/node/pull/65602)
- \[[`3481ea3c43`](https://github.com/nodejs/node/commit/3481ea3c43)] - **tls**: don't trigger SNICallback or OCSPRequest from the TLS lib stack (Tim Perry) [#&#8203;64827](https://github.com/nodejs/node/pull/64827)
- \[[`d75957f0c8`](https://github.com/nodejs/node/commit/d75957f0c8)] - **tls**: drop hand-rolled TLS client hello parser (Tim Perry) [#&#8203;64827](https://github.com/nodejs/node/pull/64827)
- \[[`c555ba0aeb`](https://github.com/nodejs/node/commit/c555ba0aeb)] - **tools**: update `tools/v8` for Python 3.13 (Richard Lau) [#&#8203;66109](https://github.com/nodejs/node/pull/66109)
- \[[`aafff27ebe`](https://github.com/nodejs/node/commit/aafff27ebe)] - **tools**: bump eslint-plugin-jsdoc in /tools/eslint in the eslint group (dependabot\[bot]) [#&#8203;66102](https://github.com/nodejs/node/pull/66102)
- \[[`7a481ebd2c`](https://github.com/nodejs/node/commit/7a481ebd2c)] - **tools**: group CodeQL GHA updates (Antoine du Hamel) [#&#8203;66057](https://github.com/nodejs/node/pull/66057)
- \[[`b2252b4074`](https://github.com/nodejs/node/commit/b2252b4074)] - **tools**: summarize auto-start-ci failures (Filip Skokan) [#&#8203;65979](https://github.com/nodejs/node/pull/65979)
- \[[`499fe73da7`](https://github.com/nodejs/node/commit/499fe73da7)] - **tools**: bump the eslint group in /tools/eslint with 6 updates (dependabot\[bot]) [#&#8203;66045](https://github.com/nodejs/node/pull/66045)
- \[[`d004d957ae`](https://github.com/nodejs/node/commit/d004d957ae)] - **tools**: update pgo build doc for linux (Chengzhong Wu) [#&#8203;66024](https://github.com/nodejs/node/pull/66024)
- \[[`bfa329dbba`](https://github.com/nodejs/node/commit/bfa329dbba)] - **tools**: correct Slack action version comments (Filip Skokan) [#&#8203;66013](https://github.com/nodejs/node/pull/66013)
- \[[`d55d30313b`](https://github.com/nodejs/node/commit/d55d30313b)] - **tools**: make checkout credential use explicit (Filip Skokan) [#&#8203;66013](https://github.com/nodejs/node/pull/66013)
- \[[`0a9e844866`](https://github.com/nodejs/node/commit/0a9e844866)] - **tools**: pass author to commit message validator (Filip Skokan) [#&#8203;66012](https://github.com/nodejs/node/pull/66012)
- \[[`f5edf1cd7c`](https://github.com/nodejs/node/commit/f5edf1cd7c)] - **tools**: reduce test runner timing overhead (Filip Skokan) [#&#8203;65980](https://github.com/nodejs/node/pull/65980)
- \[[`1cb899f727`](https://github.com/nodejs/node/commit/1cb899f727)] - **tools**: bump js-yaml from 4.3.1 to 4.3.2 in /tools/eslint (dependabot\[bot]) [#&#8203;65931](https://github.com/nodejs/node/pull/65931)
- \[[`9a1d47bc53`](https://github.com/nodejs/node/commit/9a1d47bc53)] - **tools**: bump js-yaml from 4.3.1 to 4.3.2 in /tools/lint-md (dependabot\[bot]) [#&#8203;65932](https://githu…
jkleinsc pushed a commit to electron/electron that referenced this pull request Oct 19, 2026
@claude @claude
test: re-enable Node.js tests that now pass with BoringSSL (#55096)
c1cb681 
test: re-enable Node.js tests that now pass with BoringSSL (#55071)

* test: re-enable Node.js tests that now pass with BoringSSL

Most of these were disabled because BoringSSL behaved differently from
OpenSSL. Upstream Node.js made the tests BoringSSL-aware in
nodejs/node#63161 (v24.18.0) and fixed the ML-KEM expectations in
nodejs/node#65966 (v24.22.0), so they now pass.

The es-module/test-esm-wasm entry is a stale prefix: test.py matches
entries as substrings of the path, so it was hiding 13 split files that
pass. A few entries are dropped because the tests now skip themselves.

parallel/test-cluster-primary-error, parallel/test-cluster-primary-kill,
parallel/test-diagnostics-channel-memory-leak and
parallel/test-worker-resource-limits move to the flaky list instead.


Claude-Session: https://claude.ai/code/session_01CfxP4tDxnGgFhy1kPesp3M

* test: keep two node tests disabled that crash on the testing build

test-vm-compile-function-lineoffset hits a V8 Smi::IsValid debug check and test-domain-error-types segfaults under --stress-compaction.


Claude-Session: https://claude.ai/code/session_01CfxP4tDxnGgFhy1kPesp3M

---------


(cherry picked from commit bcc5c51)


Claude-Session: https://claude.ai/code/session_01CfxP4tDxnGgFhy1kPesp3M

Co-authored-by: Claude <noreply@anthropic.com>
jkleinsc pushed a commit to electron/electron that referenced this pull request Oct 19, 2026
@claude @claude
test: re-enable Node.js tests that now pass with BoringSSL (#55095)
68ddc64 
test: re-enable Node.js tests that now pass with BoringSSL (#55071)

* test: re-enable Node.js tests that now pass with BoringSSL

Most of these were disabled because BoringSSL behaved differently from
OpenSSL. Upstream Node.js made the tests BoringSSL-aware in
nodejs/node#63161 (v24.18.0) and fixed the ML-KEM expectations in
nodejs/node#65966 (v24.22.0), so they now pass.

The es-module/test-esm-wasm entry is a stale prefix: test.py matches
entries as substrings of the path, so it was hiding 13 split files that
pass. A few entries are dropped because the tests now skip themselves.

parallel/test-cluster-primary-error, parallel/test-cluster-primary-kill,
parallel/test-diagnostics-channel-memory-leak and
parallel/test-worker-resource-limits move to the flaky list instead.


Claude-Session: https://claude.ai/code/session_01CfxP4tDxnGgFhy1kPesp3M

* test: keep two node tests disabled that crash on the testing build

test-vm-compile-function-lineoffset hits a V8 Smi::IsValid debug check and test-domain-error-types segfaults under --stress-compaction.


Claude-Session: https://claude.ai/code/session_01CfxP4tDxnGgFhy1kPesp3M

---------


(cherry picked from commit bcc5c51)


Claude-Session: https://claude.ai/code/session_01CfxP4tDxnGgFhy1kPesp3M

Co-authored-by: Claude <noreply@anthropic.com>
jkleinsc pushed a commit to electron/electron that referenced this pull request Oct 19, 2026
@claude @claude
test: re-enable Node.js tests that now pass with BoringSSL (#55094)
3b068bf 
Most of these were disabled because BoringSSL behaved differently from
OpenSSL. Upstream Node.js made the tests BoringSSL-aware in
nodejs/node#63161 (v24.18.0) and fixed the ML-KEM expectations in
nodejs/node#65966 (v24.22.0), so they now pass.

The es-module/test-esm-wasm entry is a stale prefix: test.py matches
entries as substrings of the path, so it was hiding 13 split files that
pass. A few entries are dropped because the tests now skip themselves.

43-x-y has no Node.js flaky-test list, so
parallel/test-cluster-primary-error, parallel/test-cluster-primary-kill
and parallel/test-worker-resource-limits stay disabled here.

(cherry picked from commit bcc5c51)


Claude-Session: https://claude.ai/code/session_01CfxP4tDxnGgFhy1kPesp3M

Co-authored-by: Claude <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jasnell jasnell jasnell approved these changes

Assignees

No one assigned

Labels

author ready PRs with CI started, the required approvals, and no outstanding review comments. backported-to-v24.x PRs backported to the v24.x-staging branch. lib / src Issues and PRs involving general changes in the lib/ or src/ directories. needs-ci PRs that need a full CI run.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@panva @nodejs-github-bot @jasnell