crypto: fix various edge cases

[panva]

Fix conversion, key handling, and algorithm edge cases found during an implementation audit.

• Separate Web IDL conversion from algorithm validation, preserving getter receivers and validating converted values. Correct algorithm and hash normalization, importKey() union conversion, and SubtleCrypto.supports() overload resolution and unbound calls.
• Use intrinsic buffer bounds in getRandomValues(), randomFill(), and randomFillSync(). Treat detached parameters as empty and avoid constructor/species hooks when copying parameters, derived bits, key usages, and hybrid key material.
• Correct CryptoKey prototypes, RSA key metadata and JWK alg validation, duplicate JWK key operations, and EC key import/export. Report native JWK export failures as OperationError.
• Allow backend-supported short AES-GCM IVs, reject undersized AES-KW inputs, isolate unrelated OpenSSL cipher errors, and correct PBKDF2 iteration-limit handling. Process Argon2 lanes serially when OpenSSL cannot use its own worker threads.
• Use OpenSSL's cSHAKE and KMAC implementations and remove the custom Keccak framing. Non-empty cSHAKE functionName or customization requires OpenSSL 4.0; when both are empty, continue using SHAKE. Customization retains the 512-byte limit and cannot contain null bytes.
• Reject non-byte-aligned cSHAKE/KMAC outputs and KMAC keys pending clarification of their bit-string encoding. Require KMAC keys of at least 32 bits and make zero-length KMAC verification accept an empty signature.

[nodejs-github-bot]

Review requested:

• @nodejs/crypto
• @nodejs/performance
• @nodejs/security-wg
• @nodejs/web-standards

[codecov]

Codecov Report

❌ Patch coverage is 95.48872% with 18 lines in your changes missing coverage. Please review.
✅ Project coverage is 90.30%. Comparing base (a2c8da5) to head (4f26a35).
⚠️ Report is 4 commits behind head on main.

Files with missing lines	Patch %	Lines
lib/internal/crypto/webidl.js	92.40%	5 Missing and 1 partial ⚠️
src/crypto/crypto_keys.cc	64.70%	2 Missing and 4 partials ⚠️
lib/internal/crypto/hash.js	50.00%	4 Missing ⚠️
src/crypto/crypto_kmac.cc	81.81%	0 Missing and 2 partials ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #66237      +/-   ##
==========================================
+ Coverage   90.28%   90.30%   +0.02%     
==========================================
  Files         789      789              
  Lines      272878   272784      -94     
  Branches    52097    52086      -11     
==========================================
- Hits       246360   246336      -24     
+ Misses      16975    16952      -23     
+ Partials     9543     9496      -47     

Files with missing lines	Coverage Δ
lib/internal/crypto/aes.js	94.59% <100.00%> (+0.84%)	⬆️
lib/internal/crypto/argon2.js	98.71% <100.00%> (+0.01%)	⬆️
lib/internal/crypto/cfrg.js	95.75% <100.00%> (+0.06%)	⬆️
lib/internal/crypto/chacha20_poly1305.js	98.26% <100.00%> (+0.03%)	⬆️
lib/internal/crypto/diffiehellman.js	97.72% <100.00%> (-0.02%)	⬇️
lib/internal/crypto/ec.js	96.94% <100.00%> (+0.03%)	⬆️
lib/internal/crypto/hkdf.js	100.00% <100.00%> (ø)
lib/internal/crypto/kem_hybrids.js	98.38% <100.00%> (+<0.01%)	⬆️
lib/internal/crypto/keys.js	97.59% <100.00%> (-0.72%)	⬇️
lib/internal/crypto/mac.js	99.03% <100.00%> (+0.01%)	⬆️
... and 17 more

... and 28 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[jasnell]

I think some of the additional validations would technically qualify as semver-major but I'd prefer to not have to land it as such. I think we could probably get away with classifying them as bug fixes.

[panva]

I think some of the additional validations would technically qualify as semver-major but I'd prefer to not have to land it as such. I think we could probably get away with classifying them as bug fixes.

Thank you James, some of the added validations are just fail earlies that would fall into OperationError, some of them are for [experimental] algorithms or methods, some are really edge case bug fixes that, I concur, I don't feel are needed to be treated as [semver-major].

[nodejs-github-bot]

CI: https://ci.nodejs.org/job/node-test-pull-request/77822/