remove node:crypto polyfills (#10443)

Co-authored-by: Victor Berchet <[email protected]>

Author: anonrig

.changeset/eleven-eels-change.md

@@ -0,0 +1,5 @@
+---
+"@cloudflare/unenv-preset": patch
+---
+
+Removes node:crypto polyfills

fixtures/nodejs-hybrid-app/src/index.ts

@@ -120,7 +120,6 @@ GzEf4UxiLBbUB6WRBgyVyquGfUMlKl/tnm4q0yeYQloYKSoHpGeHVJuN
 }
 
 function testGetRandomValues() {
-	assert.strictEqual(webcrypto.getRandomValues, getRandomValues);
 	assert.strictEqual(nodeCrypto.getRandomValues, getRandomValues);
 
 	return Response.json([

packages/unenv-preset/package.json

@@ -49,7 +49,7 @@
 	},
 	"peerDependencies": {
 		"unenv": "2.0.0-rc.19",
-		"workerd": "^1.20250827.0"
+		"workerd": "^1.20250828.1"
 	},
 	"peerDependenciesMeta": {
 		"workerd": {

packages/unenv-preset/src/preset.ts

@@ -20,6 +20,7 @@ const nativeModules = [
 	"async_hooks",
 	"buffer",
 	"constants",
+	"crypto",
 	"diagnostics_channel",
 	"dns",
 	"dns/promises",
@@ -44,7 +45,7 @@ const nativeModules = [
 ];
 
 // Modules implemented via a mix of workerd APIs and polyfills.
-const hybridModules = ["console", "crypto", "process", "util"];
+const hybridModules = ["console", "process", "util"];
 
 /**
  * Creates the Cloudflare preset for the given compatibility date and compatibility flags

packages/unenv-preset/src/runtime/node/crypto.ts

@@ -8,10 +8,6 @@ export default {
 } satisfies ExportedHandler;
 
 function testGetRandomValues() {
-	assert(
-		webcrypto.getRandomValues === getRandomValues,
-		"Unexpected identity for webcrypto.getRandomValues"
-	);
 	assert(
 		nodeCrypto.getRandomValues === getRandomValues,
 		"Unexpected identity for nodeCrypto.getRandomValues"

packages/vite-plugin-cloudflare/playground/node-compat/worker-random/index.ts

@@ -69,6 +69,26 @@ export const WorkerdTests: Record<string, () => void> = {
 		assert(array.every((v) => v >= 0 && v <= 0xff_ff_ff_ff));
 	},
 
+	async testCrypto() {
+		const crypto = await import("node:crypto");
+
+		assert.strictEqual(typeof crypto.pseudoRandomBytes, "function");
+
+		const removeEolV22 = getRuntimeFlagValue("remove_nodejs_compat_eol_v22");
+
+		if (removeEolV22) {
+			assert.strictEqual(crypto.Cipher, undefined);
+			assert.strictEqual(crypto.Decipher, undefined);
+			assert.strictEqual(crypto.createCipher, undefined);
+			assert.strictEqual(crypto.createDecipher, undefined);
+		} else {
+			assert.strictEqual(typeof crypto.Cipher, "function");
+			assert.strictEqual(typeof crypto.Decipher, "function");
+			assert.strictEqual(typeof crypto.createCipher, "function");
+			assert.strictEqual(typeof crypto.createDecipher, "function");
+		}
+	},
+
 	async testImplementsBuffer() {
 		const encoder = new TextEncoder();
 		const buffer = await import("node:buffer");
@@ -108,6 +128,7 @@ export const WorkerdTests: Record<string, () => void> = {
 			"async_hooks",
 			"buffer",
 			"constants",
+			"crypto",
 			"diagnostics_channel",
 			"dns",
 			"dns/promises",