[v24.x backport] backend split, KT12 limit, ByteSource MemoryRetainer + fixes and improvements - #65087

Closed

panva wants to merge 16 commits into

nodejs:v24.x-stagingfrom

panva:big-backport-bundle-24.x

Commits on Aug 6, 2026

crypto: split OpenSSL 3, BoringSSL, and legacy backends
panva
committed
736182f
crypto: limit KangarooTwelveParams customization to 512 bytes
panva
committed
44ee9c3
crypto: retain legacy DH validation
panva
committed
570bc85
crypto: handle incomplete RSA private keys
panva
committed
6f7db99
crypto: cleanse provider private key copies
panva
committed
48e60bc
crypto: preserve RSA-PSS legacy pubkey DER
panva
committed
f21f5e1
crypto: handle DH operation failures
panva
committed
c01e28c
crypto: initialize KeyObjectData mutex eagerly
panva
committed
cdea4cc
crypto: fix Argon2 validation errors
panva
committed
097dbaa
crypto: validate key generation options
panva
committed
febd7df
crypto: reuse X509 issuer result
panva
committed
04eb882
crypto: clarify missing cipher error
panva
committed
17ea116
src: avoid redundant KEM encapsulation copies
panva
committed
ba2bdc8
src: implement MemoryRetainer protocol for ByteSource
panva
committed
dabb485
crypto: handle XOF output allocation failure
panva
committed
5d808f0
crypto: preserve OpenSSL errors from KDF failures
panva
committed
e176aba