src: decouple KeyObject and CryptoKey and move CryptoKey to src

[panva]

Refactors Node.js' Web Crypto CryptoKey implementation to decouple it from KeyObject by moving CryptoKey's internal-slot storage into a new native NativeCryptoKey base and updating internal crypto code to use slot accessors instead of JS-visible properties.

Paired with a future EOL #62321 deprecation (v26.x runtime-deprecation, v27.x EOL) this makes non-extractable CryptoKey key material unreachable in userland 🎉 thanks to removing public access to the [[handle]] internal slot.

Changes:

• Introduces NativeCryptoKey (C++) plus JS-side slot helpers (getCryptoKey{Type,Extractable,Algorithm,Usages,Handle}) and updates Web Crypto/internal consumers accordingly.
• Migrates Web Crypto key generation/import/export paths from KeyObject wrappers to KeyObjectHandle usage, including structured-clone/worker-transfer support.
• Adds targeted regression tests for slot hiding / brand checks / clone-transfer and adds Web Crypto sign/verify benchmarks.

The PR is squash-merged, but the changes are split into logical commits to make review tractable.

Commits

Each commit has a description covering its scope and rationale, see individual commit messages for details. Commits are cumulative (except for fixups and applying feedback). No later commit from the ones listed below revises code introduced by an earlier one. In order:

1. src: decouple KeyObject and CryptoKey and move CryptoKey to src (empty, just a squash target)
2. src,crypto: add NativeCryptoKey
3. lib,crypto: rewire CryptoKey on the native class
4. lib,crypto: migrate algorithm modules to native CryptoKey
5. src,crypto: relax RSA/EC keygen arg checks
6. lib,crypto: validate HkdfParams info length early
7. lib,crypto: add early structural JWK validation
8. test: add CryptoKey class regression tests
9. benchmark: add Web Crypto sign/verify benchmarks
10. src,lib: switch usages internal slot to a bitmask
11. ++ ... rest is fixups and applying feedback

The PR's changes UI is your friend, either filter commits, or filter files, or both, mark reviewed files as Viewed to remember where you left off.

Benchmark(s)

https://ci.nodejs.org/view/Node.js%20benchmark/job/benchmark-node-micro-benchmarks/1833/
https://ci.nodejs.org/view/Node.js%20benchmark/job/benchmark-node-micro-benchmarks/1834/
https://ci.nodejs.org/view/Node.js%20benchmark/job/benchmark-node-micro-benchmarks/1835/

There's a ton of noise in this to conclude this isn't a performance regression. 🤞

---

Signed-off-by: Filip Skokan <panva.ip@gmail.com>

[nodejs-github-bot]

Review requested:

• @nodejs/crypto
• @nodejs/performance
• @nodejs/cpp-reviewers (for src,crypto: add NativeCryptoKey)

[codecov]

Codecov Report

❌ Patch coverage is 91.17647% with 90 lines in your changes missing coverage. Please review.
✅ Project coverage is 89.64%. Comparing base (5d578c5) to head (aedb3e4).
⚠️ Report is 25 commits behind head on main.

Files with missing lines	Patch %	Lines
src/crypto/crypto_keys.cc	71.75%	16 Missing and 34 partials ⚠️
lib/internal/crypto/keys.js	96.69%	9 Missing ⚠️
lib/internal/crypto/webcrypto_util.js	86.56%	9 Missing ⚠️
lib/internal/crypto/webcrypto.js	93.47%	2 Missing and 4 partials ⚠️
src/crypto/crypto_ec.cc	55.55%	2 Missing and 2 partials ⚠️
src/crypto/crypto_keys.h	73.33%	4 Missing ⚠️
lib/internal/crypto/ml_kem.js	92.85%	3 Missing ⚠️
lib/internal/crypto/diffiehellman.js	81.81%	2 Missing ⚠️
lib/internal/crypto/cfrg.js	96.96%	1 Missing ⚠️
lib/internal/crypto/ml_dsa.js	97.61%	1 Missing ⚠️
... and 1 more

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #62924      +/-   ##
==========================================
- Coverage   89.65%   89.64%   -0.01%     
==========================================
  Files         708      708              
  Lines      220402   220696     +294     
  Branches    42269    42358      +89     
==========================================
+ Hits       197597   197852     +255     
+ Misses      14671    14651      -20     
- Partials     8134     8193      +59     

Files with missing lines	Coverage Δ
lib/internal/crypto/aes.js	92.48% <100.00%> (+2.61%)	⬆️
lib/internal/crypto/argon2.js	95.95% <100.00%> (+0.06%)	⬆️
lib/internal/crypto/chacha20_poly1305.js	98.42% <100.00%> (+6.42%)	⬆️
lib/internal/crypto/ec.js	95.60% <100.00%> (+1.43%)	⬆️
lib/internal/crypto/hkdf.js	96.04% <100.00%> (+0.06%)	⬆️
lib/internal/crypto/mac.js	98.98% <100.00%> (+6.31%)	⬆️
lib/internal/crypto/pbkdf2.js	94.89% <100.00%> (+0.15%)	⬆️
lib/internal/crypto/util.js	96.51% <100.00%> (+0.70%)	⬆️
lib/internal/crypto/webidl.js	98.39% <100.00%> (+<0.01%)	⬆️
lib/internal/util/comparisons.js	99.71% <100.00%> (+<0.01%)	⬆️
... and 13 more

... and 45 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[panva]

@addaleax thank you for your notes, I hope 65e5612 addresses them.

Edit: now squashed back to its right place

[panva]

@anonrig https://github.com/nodejs/node/compare/684325443cbfc5b691465efde509c169c0a87401..db2a2fb8ead37ed8571fa96c5bd5444054556236

Also

• fixed a bug that exposed the internal key usages slot in 1a8a0f0
• rewrote [[usages]] to be a bitmask in 7bcee80
• documented some of the internal helpers in 1af292c

Edit: now squashed back to its right place

[panva]

I'm going to autosquash the fixups to restore some notion of coherence when opening the individual commits.

[nodejs-github-bot]

CI: https://ci.nodejs.org/job/node-test-pull-request/73037/

[nodejs-github-bot]

CI: https://ci.nodejs.org/job/node-test-pull-request/73039/

[panva]

Landed in 25f80fb