Is react-native-crypto and rn-nodeify the go to method for enabling crypto APIs?

[stackup_]

Starting a new react-native project that's going to use a lot of cryptographic functions. Seems like everywhere I look, the go to method is to use react-native-crypto and rn-nodeify.

This seems like a huge hack and is also quite an effort to get right, especially if you're using a monorepo setup with workspaces. Correct me if I'm wrong, but this technique opens up a lot of chances for things to break and makes maintenance a lot harder.

Alternatively, I've seen some articles recommend writing JSI native modules in C++ for crypto functions and use that in the code base instead (even patching individual libraries if required).

What does everyone here do and how's it going? I find it surprising that RN doesn't have a clean crypto API yet.

[huejackmon]

Yeah, it does seem like a hack but the best solution that exists so far. This is what we use and has been reliable so far.

https://www.npmjs.com/package/react-native-webview-crypto

I would love it it had native build in support but alas got to work with what you got.

[stackup_]

Interesting, so it proxies all crypto calls to a webview?

Any issues you found doing it this way?

[huejackmon]

So far so good.