@the-polyfills/get-random-values 1.0.1

package/GetRandomValues.podspec

@@ -0,0 +1,20 @@
+require "json"
+
+package = JSON.parse(File.read(File.join(__dir__, "package.json")))
+
+Pod::Spec.new do |s|
+  s.name         = "GetRandomValues"
+  s.version      = package["version"]
+  s.summary      = package["description"]
+  s.homepage     = package["homepage"]
+  s.license      = package["license"]
+  s.authors      = package["author"]
+
+  s.platforms    = { :ios => min_ios_version_supported }
+  s.source       = { :git => "https://github.com/doanhtu07/react-native-the-polyfills.git", :tag => "#{s.version}" }
+
+  s.source_files = "ios/**/*.{h,m,mm,swift,cpp}"
+  s.private_header_files = "ios/**/*.h"
+
+  install_modules_dependencies(s)
+end

package/LICENSE

@@ -0,0 +1,20 @@
+MIT License
+
+Copyright (c) 2026 Anh Tu Do
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,5 @@
+# @the-polyfills/get-random-values
+
+Polyfill for `crypto.getRandomValues` in React Native
+
+Please refer to README.md at https://github.com/doanhtu07/react-native-the-polyfills for more details and documentation.

package/android/build.gradle

@@ -0,0 +1,55 @@
+buildscript {
+  ext.GetRandomValues = [
+    kotlinVersion: "2.0.21",
+    minSdkVersion: 24,
+    compileSdkVersion: 36
+  ]
+
+  ext.getExtOrDefault = { prop ->
+    if (rootProject.ext.has(prop)) {
+      return rootProject.ext.get(prop)
+    }
+
+    return GetRandomValues[prop]
+  }
+
+  repositories {
+    google()
+    mavenCentral()
+  }
+
+  dependencies {
+    classpath "com.android.tools.build:gradle:8.7.2"
+    // noinspection DifferentKotlinGradleVersion
+    classpath "org.jetbrains.kotlin:kotlin-gradle-plugin:${getExtOrDefault('kotlinVersion')}"
+  }
+}
+
+
+apply plugin: "com.android.library"
+
+if (project.extensions.findByName("kotlin") == null) {
+  apply plugin: "kotlin-android"
+}
+
+
+apply plugin: "com.facebook.react"
+
+android {
+  namespace "com.thepolyfills.getrandomvalues"
+
+  compileSdkVersion getExtOrDefault("compileSdkVersion")
+
+  defaultConfig {
+    minSdkVersion getExtOrDefault("minSdkVersion")
+  }
+
+  compileOptions {
+    sourceCompatibility JavaVersion.VERSION_17
+    targetCompatibility JavaVersion.VERSION_17
+  }
+}
+
+dependencies {
+  implementation "com.facebook.react:react-android"
+}

package/android/src/main/AndroidManifest.xml

@@ -0,0 +1,2 @@
+<manifest xmlns:android="http://schemas.android.com/apk/res/android">
+</manifest>

package/android/src/main/java/com/thepolyfills/getrandomvalues/GetRandomValuesModule.kt

@@ -0,0 +1,37 @@
+package com.thepolyfills.getrandomvalues
+
+import android.util.Base64
+import com.facebook.react.bridge.ReactApplicationContext
+import com.facebook.react.bridge.ReactContextBaseJavaModule
+import com.facebook.react.bridge.ReactMethod
+import java.security.SecureRandom
+
+class GetRandomValuesModule(reactContext: ReactApplicationContext) :
+    ReactContextBaseJavaModule(reactContext) {
+
+    override fun getName(): String = NAME
+
+    // Blocking synchronous method so `getRandomBase64` returns the value
+    // directly, matching the synchronous WebCrypto API.
+    @ReactMethod(isBlockingSynchronousMethod = true)
+    fun getRandomBase64(byteLength: Double): String {
+        val length = byteLength.toInt()
+
+        if (length < 0) {
+            throw IllegalArgumentException("byteLength must be >= 0")
+        }
+
+        if (length == 0) {
+            return ""
+        }
+
+        val bytes = ByteArray(length)
+        SecureRandom().nextBytes(bytes)
+
+        return Base64.encodeToString(bytes, Base64.NO_WRAP)
+    }
+
+    companion object {
+        const val NAME = "GetRandomValues"
+    }
+}

package/android/src/main/java/com/thepolyfills/getrandomvalues/GetRandomValuesPackage.kt

@@ -0,0 +1,16 @@
+package com.thepolyfills.getrandomvalues
+
+import com.facebook.react.ReactPackage
+import com.facebook.react.bridge.NativeModule
+import com.facebook.react.bridge.ReactApplicationContext
+import com.facebook.react.uimanager.ViewManager
+
+class GetRandomValuesPackage : ReactPackage {
+    override fun createNativeModules(reactContext: ReactApplicationContext): List<NativeModule> {
+        return listOf(GetRandomValuesModule(reactContext))
+    }
+
+    override fun createViewManagers(reactContext: ReactApplicationContext): List<ViewManager<*, *>> {
+        return emptyList()
+    }
+}

package/ios/GetRandomValues.h

@@ -0,0 +1,5 @@
+#import <React/RCTBridgeModule.h>
+
+@interface GetRandomValues : NSObject <RCTBridgeModule>
+
+@end

package/ios/GetRandomValues.mm

@@ -0,0 +1,35 @@
+#import "GetRandomValues.h"
+#import <Security/Security.h>
+
+@implementation GetRandomValues
+
+RCT_EXPORT_MODULE(GetRandomValues)
+
++ (BOOL)requiresMainQueueSetup {
+    return NO;
+}
+
+RCT_EXPORT_BLOCKING_SYNCHRONOUS_METHOD(getRandomBase64 : (double)byteLength) {
+    NSInteger length = (NSInteger)byteLength;
+
+    if (length < 0) {
+        return nil;
+    }
+
+    if (length == 0) {
+        return @"";
+    }
+
+    NSMutableData *data = [NSMutableData dataWithLength:(NSUInteger)length];
+
+    int status = SecRandomCopyBytes(kSecRandomDefault, (size_t)length,
+                                    data.mutableBytes);
+
+    if (status != errSecSuccess) {
+        return nil;
+    }
+
+    return [data base64EncodedStringWithOptions:0];
+}
+
+@end

package/lib/module/NativeGetRandomValues.js

@@ -0,0 +1,17 @@
+"use strict";
+
+import { NativeModules } from 'react-native';
+
+// Old Architecture (Paper) only: the native module is registered via
+// RCT_EXPORT_MODULE / ReactPackage and looked up through NativeModules.
+// There is intentionally no TurboModuleRegistry usage and no codegen spec
+// in this package.
+
+export function getNativeGetRandomValues() {
+  const native = NativeModules.GetRandomValues;
+  if (native == null || typeof native.getRandomBase64 !== 'function') {
+    throw new Error("Native module 'GetRandomValues' not found. Rebuild the app after installing the package (e.g. `expo prebuild --clean`).");
+  }
+  return native;
+}
+//# sourceMappingURL=NativeGetRandomValues.js.map

package/lib/module/NativeGetRandomValues.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["NativeModules","getNativeGetRandomValues","native","GetRandomValues","getRandomBase64","Error"],"sourceRoot":"../../src","sources":["NativeGetRandomValues.ts"],"mappings":";;AAAA,SAASA,aAAa,QAAQ,cAAc;;AAE5C;AACA;AACA;AACA;;AAKA,OAAO,SAASC,wBAAwBA,CAAA,EAAS;EAC/C,MAAMC,MAAM,GAAGF,aAAa,CAACG,eAAmC;EAEhE,IAAID,MAAM,IAAI,IAAI,IAAI,OAAOA,MAAM,CAACE,eAAe,KAAK,UAAU,EAAE;IAClE,MAAM,IAAIC,KAAK,CACb,yHACF,CAAC;EACH;EAEA,OAAOH,MAAM;AACf","ignoreList":[]}

package/lib/module/constants.js

@@ -0,0 +1,54 @@
+"use strict";
+
+/**
+ * Maximum number of bytes `crypto.getRandomValues()` may fill in a single call.
+ *
+ * The WebCrypto spec sets this quota at 65,536 bytes. Browsers throw a
+ * `QuotaExceededError` DOMException when `array.byteLength` exceeds it.
+ *
+ * Notes for this polyfill:
+ * - The check uses `byteLength`, not `length`. For example,
+ *   `Uint16Array(40_000)` has `length === 40_000` but
+ *   `byteLength === 80_000`, so it must throw.
+ * - Hermes (React Native) has no `DOMException`, so `getRandomValues`
+ *   throws a plain `Error` with `error.name = 'QuotaExceededError'` instead.
+ *   Browser-style `catch (e) { e.name === 'QuotaExceededError' }` code keeps
+ *   working.
+ * - A zero-length array short-circuits before any Expo/native call.
+ */
+export const MAX_BYTE_LENGTH = 65_536;
+
+/**
+ * Reverse lookup table for standard base64 decoding.
+ *
+ * The native module can only return random bytes as a base64 `string` over
+ * the synchronous bridge, so JS decodes it back to bytes without an
+ * external dependency.
+ *
+ * How it works:
+ * - The base64 alphabet `'A-Za-z0-9+/'` maps index -> 6-bit value
+ *   (`'A' === 0`, ..., `'/' === 63`).
+ * - This table inverts that: `table[charCode] === 6-bit value`, built once
+ *   at module load via the IIFE below.
+ * - The table has 128 slots (one per ASCII code). Slots are pre-filled with
+ *   `-1` as an "invalid character" marker; only the 64 alphabet codes are
+ *   overwritten. `'='` padding is handled separately by the decoder (mapped
+ *   to `0`), and any lookup that still yields `-1` (or `undefined ?? -1`
+ *   for char codes > 127) makes `base64ToBytes` throw
+ *   `'Invalid base64 character'`.
+ *
+ * Decode math (per 4-char block in `base64ToBytes`):
+ * - `triplet = (a << 18) | (b << 12) | (c << 6) | d` reassembles 4 x 6 bits
+ *   into 24 bits, then splits into 3 bytes via `>> 16`, `>> 8`, `& 0xff`.
+ * - `outputLength = (clean.length / 4) * 3 - padding` accounts for trailing
+ *   `'='` / `'=='`, and `outIndex < outputLength` guards drop padding bytes.
+ */
+export const BASE64_LOOKUP = (() => {
+  const chars = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/';
+  const table = new Array(128).fill(-1);
+  for (let i = 0; i < chars.length; i++) {
+    table[chars.charCodeAt(i)] = i;
+  }
+  return table;
+})();
+//# sourceMappingURL=constants.js.map

package/lib/module/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["MAX_BYTE_LENGTH","BASE64_LOOKUP","chars","table","Array","fill","i","length","charCodeAt"],"sourceRoot":"../../src","sources":["constants.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMA,eAAe,GAAG,MAAM;;AAErC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,aAAa,GAAG,CAAC,MAAM;EAClC,MAAMC,KAAK,GACT,kEAAkE;EAEpE,MAAMC,KAAK,GAAG,IAAIC,KAAK,CAAS,GAAG,CAAC,CAACC,IAAI,CAAC,CAAC,CAAC,CAAC;EAE7C,KAAK,IAAIC,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGJ,KAAK,CAACK,MAAM,EAAED,CAAC,EAAE,EAAE;IACrCH,KAAK,CAACD,KAAK,CAACM,UAAU,CAACF,CAAC,CAAC,CAAC,GAAGA,CAAC;EAChC;EAEA,OAAOH,KAAK;AACd,CAAC,EAAE,CAAC","ignoreList":[]}

package/lib/module/index.js

@@ -0,0 +1,18 @@
+"use strict";
+
+import { getRandomValues } from "./utils/get-random-values.js";
+export { getRandomValues } from "./utils/get-random-values.js";
+export function installGetRandomValues(options) {
+  const g = globalThis;
+  if (typeof g.crypto !== 'object' || g.crypto === null) {
+    g.crypto = {};
+  }
+  if (options?.force || typeof g.crypto.getRandomValues !== 'function') {
+    g.crypto.getRandomValues = getRandomValues;
+  }
+}
+
+// Side-effect import installs the polyfill, matching
+// `react-native-get-random-values` behavior.
+installGetRandomValues();
+//# sourceMappingURL=index.js.map

package/lib/module/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["getRandomValues","installGetRandomValues","options","g","globalThis","crypto","force"],"sourceRoot":"../../src","sources":["index.tsx"],"mappings":";;AAAA,SAASA,eAAe,QAAQ,8BAA2B;AAE3D,SAASA,eAAe,QAAQ,8BAA2B;AAG3D,OAAO,SAASC,sBAAsBA,CAACC,OAA6B,EAAQ;EAC1E,MAAMC,CAAC,GAAGC,UAAiB;EAE3B,IAAI,OAAOD,CAAC,CAACE,MAAM,KAAK,QAAQ,IAAIF,CAAC,CAACE,MAAM,KAAK,IAAI,EAAE;IACrDF,CAAC,CAACE,MAAM,GAAG,CAAC,CAAC;EACf;EAEA,IAAIH,OAAO,EAAEI,KAAK,IAAI,OAAOH,CAAC,CAACE,MAAM,CAACL,eAAe,KAAK,UAAU,EAAE;IACpEG,CAAC,CAACE,MAAM,CAACL,eAAe,GAAGA,eAAe;EAC5C;AACF;;AAEA;AACA;AACAC,sBAAsB,CAAC,CAAC","ignoreList":[]}

package/lib/module/package.json

@@ -0,0 +1 @@
+{"type":"module"}

package/lib/module/utils/base64-decode.js

@@ -0,0 +1,43 @@
+"use strict";
+
+import { BASE64_LOOKUP } from "../constants.js";
+export function base64ToBytes(base64) {
+  // Standard base64 (NO_WRAP on Android, no line breaks on iOS), may be padded.
+  const clean = base64.replace(/\s/g, '');
+  if (clean.length === 0) {
+    return new Uint8Array(0);
+  }
+  if (clean.length % 4 !== 0) {
+    throw new Error('Invalid base64 string length');
+  }
+  let padding = 0;
+  if (clean.endsWith('==')) {
+    padding = 2;
+  } else if (clean.endsWith('=')) {
+    padding = 1;
+  }
+  const outputLength = clean.length / 4 * 3 - padding;
+  const output = new Uint8Array(outputLength);
+  let outIndex = 0;
+  for (let i = 0; i < clean.length; i += 4) {
+    const a = BASE64_LOOKUP[clean.charCodeAt(i)] ?? -1;
+    const b = BASE64_LOOKUP[clean.charCodeAt(i + 1)] ?? -1;
+    const c = clean[i + 2] === '=' ? 0 : BASE64_LOOKUP[clean.charCodeAt(i + 2)] ?? -1;
+    const d = clean[i + 3] === '=' ? 0 : BASE64_LOOKUP[clean.charCodeAt(i + 3)] ?? -1;
+    if (a < 0 || b < 0 || c < 0 || d < 0) {
+      throw new Error('Invalid base64 character');
+    }
+    const triplet = a << 18 | b << 12 | c << 6 | d;
+    if (outIndex < outputLength) {
+      output[outIndex++] = triplet >> 16 & 0xff;
+    }
+    if (outIndex < outputLength) {
+      output[outIndex++] = triplet >> 8 & 0xff;
+    }
+    if (outIndex < outputLength) {
+      output[outIndex++] = triplet & 0xff;
+    }
+  }
+  return output;
+}
+//# sourceMappingURL=base64-decode.js.map

package/lib/module/utils/base64-decode.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["BASE64_LOOKUP","base64ToBytes","base64","clean","replace","length","Uint8Array","Error","padding","endsWith","outputLength","output","outIndex","i","a","charCodeAt","b","c","d","triplet"],"sourceRoot":"../../../src","sources":["utils/base64-decode.ts"],"mappings":";;AAAA,SAASA,aAAa,QAAQ,iBAAc;AAE5C,OAAO,SAASC,aAAaA,CAACC,MAAc,EAAc;EACxD;EACA,MAAMC,KAAK,GAAGD,MAAM,CAACE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;EAEvC,IAAID,KAAK,CAACE,MAAM,KAAK,CAAC,EAAE;IACtB,OAAO,IAAIC,UAAU,CAAC,CAAC,CAAC;EAC1B;EAEA,IAAIH,KAAK,CAACE,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE;IAC1B,MAAM,IAAIE,KAAK,CAAC,8BAA8B,CAAC;EACjD;EAEA,IAAIC,OAAO,GAAG,CAAC;EAEf,IAAIL,KAAK,CAACM,QAAQ,CAAC,IAAI,CAAC,EAAE;IACxBD,OAAO,GAAG,CAAC;EACb,CAAC,MAAM,IAAIL,KAAK,CAACM,QAAQ,CAAC,GAAG,CAAC,EAAE;IAC9BD,OAAO,GAAG,CAAC;EACb;EAEA,MAAME,YAAY,GAAIP,KAAK,CAACE,MAAM,GAAG,CAAC,GAAI,CAAC,GAAGG,OAAO;EACrD,MAAMG,MAAM,GAAG,IAAIL,UAAU,CAACI,YAAY,CAAC;EAE3C,IAAIE,QAAQ,GAAG,CAAC;EAEhB,KAAK,IAAIC,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGV,KAAK,CAACE,MAAM,EAAEQ,CAAC,IAAI,CAAC,EAAE;IACxC,MAAMC,CAAC,GAAGd,aAAa,CAACG,KAAK,CAACY,UAAU,CAACF,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAElD,MAAMG,CAAC,GAAGhB,aAAa,CAACG,KAAK,CAACY,UAAU,CAACF,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAEtD,MAAMI,CAAC,GACLd,KAAK,CAACU,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,GAAIb,aAAa,CAACG,KAAK,CAACY,UAAU,CAACF,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAE;IAE3E,MAAMK,CAAC,GACLf,KAAK,CAACU,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,GAAIb,aAAa,CAACG,KAAK,CAACY,UAAU,CAACF,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAE;IAE3E,IAAIC,CAAC,GAAG,CAAC,IAAIE,CAAC,GAAG,CAAC,IAAIC,CAAC,GAAG,CAAC,IAAIC,CAAC,GAAG,CAAC,EAAE;MACpC,MAAM,IAAIX,KAAK,CAAC,0BAA0B,CAAC;IAC7C;IAEA,MAAMY,OAAO,GAAIL,CAAC,IAAI,EAAE,GAAKE,CAAC,IAAI,EAAG,GAAIC,CAAC,IAAI,CAAE,GAAGC,CAAC;IAEpD,IAAIN,QAAQ,GAAGF,YAAY,EAAE;MAC3BC,MAAM,CAACC,QAAQ,EAAE,CAAC,GAAIO,OAAO,IAAI,EAAE,GAAI,IAAI;IAC7C;IAEA,IAAIP,QAAQ,GAAGF,YAAY,EAAE;MAC3BC,MAAM,CAACC,QAAQ,EAAE,CAAC,GAAIO,OAAO,IAAI,CAAC,GAAI,IAAI;IAC5C;IAEA,IAAIP,QAAQ,GAAGF,YAAY,EAAE;MAC3BC,MAAM,CAACC,QAAQ,EAAE,CAAC,GAAGO,OAAO,GAAG,IAAI;IACrC;EACF;EAEA,OAAOR,MAAM;AACf","ignoreList":[]}

package/lib/module/utils/chrome.js

@@ -0,0 +1,16 @@
+"use strict";
+
+export function isRemoteDebuggingInChrome() {
+  const g = globalThis;
+
+  // Remote debugging in Chrome is not supported in bridgeless mode.
+  if ('RN$Bridgeless' in g && g.RN$Bridgeless === true) {
+    return false;
+  }
+  try {
+    return __DEV__ !== undefined && __DEV__ && g.nativeCallSyncHook === undefined;
+  } catch {
+    return false;
+  }
+}
+//# sourceMappingURL=chrome.js.map

package/lib/module/utils/chrome.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["isRemoteDebuggingInChrome","g","globalThis","RN$Bridgeless","__DEV__","undefined","nativeCallSyncHook"],"sourceRoot":"../../../src","sources":["utils/chrome.ts"],"mappings":";;AAEA,OAAO,SAASA,yBAAyBA,CAAA,EAAY;EACnD,MAAMC,CAAC,GAAGC,UAAiB;;EAE3B;EACA,IAAI,eAAe,IAAID,CAAC,IAAIA,CAAC,CAACE,aAAa,KAAK,IAAI,EAAE;IACpD,OAAO,KAAK;EACd;EAEA,IAAI;IACF,OACEC,OAAO,KAAKC,SAAS,IAAID,OAAO,IAAIH,CAAC,CAACK,kBAAkB,KAAKD,SAAS;EAE1E,CAAC,CAAC,MAAM;IACN,OAAO,KAAK;EACd;AACF","ignoreList":[]}

package/lib/module/utils/get-random-values.js

@@ -0,0 +1,57 @@
+"use strict";
+
+import { MAX_BYTE_LENGTH } from "../constants.js";
+import { getNativeGetRandomValues } from "../NativeGetRandomValues.js";
+import { base64ToBytes } from "./base64-decode.js";
+import { isRemoteDebuggingInChrome } from "./chrome.js";
+import { insecureRandomValues } from "./insecure-random-values.js";
+function isAllowedArray(value) {
+  if (!ArrayBuffer.isView(value) || value instanceof DataView) {
+    return false;
+  }
+
+  // WebCrypto only allows integer TypedArrays (no float16/32/64).
+  return value instanceof Int8Array || value instanceof Uint8Array || value instanceof Uint8ClampedArray || value instanceof Int16Array || value instanceof Uint16Array || value instanceof Int32Array || value instanceof Uint32Array || value instanceof BigInt64Array || value instanceof BigUint64Array;
+}
+export function getRandomValues(array) {
+  if (!isAllowedArray(array)) {
+    throw new TypeError('crypto.getRandomValues: expected an integer TypedArray (e.g. Uint8Array)');
+  }
+  if (array.byteLength > MAX_BYTE_LENGTH) {
+    // Browsers throw QuotaExceededError (DOMException). RN Hermes may not
+    // have DOMException, so use a plain Error with the same name.
+    const error = new Error(`crypto.getRandomValues: byteLength ${array.byteLength} exceeds ${MAX_BYTE_LENGTH}`);
+    error.name = 'QuotaExceededError';
+    throw error;
+  }
+  if (array.byteLength === 0) {
+    return array;
+  }
+
+  // Expo SDK 48+: prefer ExpoCrypto when available so managed workflow
+  // apps don't need our native module linked.
+
+  const expoGetRandomValues = globalThis?.expo?.modules?.ExpoCrypto?.getRandomValues;
+  if (typeof expoGetRandomValues === 'function') {
+    // ExpoCrypto mutates the array in place and returns void.
+    expoGetRandomValues.call(globalThis.expo.modules.ExpoCrypto, array);
+    return array;
+  }
+
+  // Remote debugging in Chrome can't call sync native methods
+  // ("Calling synchronous methods on native modules is not supported in
+  // Chrome"), so fall back to Math.random() there.
+  if (isRemoteDebuggingInChrome()) {
+    return insecureRandomValues(array);
+  }
+  const base64 = getNativeGetRandomValues().getRandomBase64(array.byteLength);
+  const bytes = base64ToBytes(base64);
+  if (bytes.byteLength !== array.byteLength) {
+    throw new Error(`crypto.getRandomValues: native returned ${bytes.byteLength} bytes, expected ${array.byteLength}`);
+  }
+
+  // Write through to the underlying buffer so BigInt arrays work too.
+  new Uint8Array(array.buffer, array.byteOffset, array.byteLength).set(bytes);
+  return array;
+}
+//# sourceMappingURL=get-random-values.js.map

package/lib/module/utils/get-random-values.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["MAX_BYTE_LENGTH","getNativeGetRandomValues","base64ToBytes","isRemoteDebuggingInChrome","insecureRandomValues","isAllowedArray","value","ArrayBuffer","isView","DataView","Int8Array","Uint8Array","Uint8ClampedArray","Int16Array","Uint16Array","Int32Array","Uint32Array","BigInt64Array","BigUint64Array","getRandomValues","array","TypeError","byteLength","error","Error","name","expoGetRandomValues","globalThis","expo","modules","ExpoCrypto","call","base64","getRandomBase64","bytes","buffer","byteOffset","set"],"sourceRoot":"../../../src","sources":["utils/get-random-values.ts"],"mappings":";;AAAA,SAASA,eAAe,QAAQ,iBAAc;AAC9C,SAASC,wBAAwB,QAAQ,6BAA0B;AACnE,SAASC,aAAa,QAAQ,oBAAiB;AAC/C,SAASC,yBAAyB,QAAQ,aAAU;AACpD,SAASC,oBAAoB,QAAQ,6BAA0B;AAE/D,SAASC,cAAcA,CAACC,KAAc,EAA4B;EAChE,IAAI,CAACC,WAAW,CAACC,MAAM,CAACF,KAAK,CAAC,IAAIA,KAAK,YAAYG,QAAQ,EAAE;IAC3D,OAAO,KAAK;EACd;;EAEA;EACA,OACEH,KAAK,YAAYI,SAAS,IAC1BJ,KAAK,YAAYK,UAAU,IAC3BL,KAAK,YAAYM,iBAAiB,IAClCN,KAAK,YAAYO,UAAU,IAC3BP,KAAK,YAAYQ,WAAW,IAC5BR,KAAK,YAAYS,UAAU,IAC3BT,KAAK,YAAYU,WAAW,IAC5BV,KAAK,YAAYW,aAAa,IAC9BX,KAAK,YAAYY,cAAc;AAEnC;AAIA,OAAO,SAASC,eAAeA,CAA4BC,KAAQ,EAAK;EACtE,IAAI,CAACf,cAAc,CAACe,KAAK,CAAC,EAAE;IAC1B,MAAM,IAAIC,SAAS,CACjB,0EACF,CAAC;EACH;EAEA,IAAID,KAAK,CAACE,UAAU,GAAGtB,eAAe,EAAE;IACtC;IACA;IACA,MAAMuB,KAAK,GAAG,IAAIC,KAAK,CACrB,sCAAsCJ,KAAK,CAACE,UAAU,YAAYtB,eAAe,EACnF,CAAC;IACDuB,KAAK,CAACE,IAAI,GAAG,oBAAoB;IACjC,MAAMF,KAAK;EACb;EAEA,IAAIH,KAAK,CAACE,UAAU,KAAK,CAAC,EAAE;IAC1B,OAAOF,KAAK;EACd;;EAEA;EACA;;EAEA,MAAMM,mBAAmB,GAAIC,UAAU,EAAUC,IAAI,EAAEC,OAAO,EAAEC,UAAU,EACtEX,eAAiE;EAErE,IAAI,OAAOO,mBAAmB,KAAK,UAAU,EAAE;IAC7C;IACAA,mBAAmB,CAACK,IAAI,CAAEJ,UAAU,CAASC,IAAI,CAACC,OAAO,CAACC,UAAU,EAAEV,KAAK,CAAC;IAC5E,OAAOA,KAAK;EACd;;EAEA;EACA;EACA;EACA,IAAIjB,yBAAyB,CAAC,CAAC,EAAE;IAC/B,OAAOC,oBAAoB,CAACgB,KAAK,CAAC;EACpC;EAEA,MAAMY,MAAM,GAAG/B,wBAAwB,CAAC,CAAC,CAACgC,eAAe,CAACb,KAAK,CAACE,UAAU,CAAC;EAC3E,MAAMY,KAAK,GAAGhC,aAAa,CAAC8B,MAAM,CAAC;EAEnC,IAAIE,KAAK,CAACZ,UAAU,KAAKF,KAAK,CAACE,UAAU,EAAE;IACzC,MAAM,IAAIE,KAAK,CACb,2CAA2CU,KAAK,CAACZ,UAAU,oBAAoBF,KAAK,CAACE,UAAU,EACjG,CAAC;EACH;;EAEA;EACA,IAAIX,UAAU,CAACS,KAAK,CAACe,MAAM,EAAEf,KAAK,CAACgB,UAAU,EAAEhB,KAAK,CAACE,UAAU,CAAC,CAACe,GAAG,CAACH,KAAK,CAAC;EAE3E,OAAOd,KAAK;AACd","ignoreList":[]}

package/lib/module/utils/insecure-random-values.js

@@ -0,0 +1,20 @@
+"use strict";
+
+let insecureWarned = false;
+export function insecureRandomValues(array) {
+  if (!insecureWarned) {
+    console.warn('crypto.getRandomValues: using an insecure random number generator, ' + 'this should only happen when running in a debugger without support for crypto.getRandomValues');
+    insecureWarned = true;
+  }
+
+  // Fill through a Uint8 view so BigInt arrays work too.
+  const bytes = new Uint8Array(array.buffer, array.byteOffset, array.byteLength);
+  for (let i = 0, r = 0; i < bytes.length; i++) {
+    if ((i & 0x03) === 0) {
+      r = Math.random() * 0x100000000;
+    }
+    bytes[i] = r >>> ((i & 0x03) << 3) & 0xff;
+  }
+  return array;
+}
+//# sourceMappingURL=insecure-random-values.js.map

package/lib/module/utils/insecure-random-values.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["insecureWarned","insecureRandomValues","array","console","warn","bytes","Uint8Array","buffer","byteOffset","byteLength","i","r","length","Math","random"],"sourceRoot":"../../../src","sources":["utils/insecure-random-values.ts"],"mappings":";;AAAA,IAAIA,cAAc,GAAG,KAAK;AAE1B,OAAO,SAASC,oBAAoBA,CAA4BC,KAAQ,EAAK;EAC3E,IAAI,CAACF,cAAc,EAAE;IACnBG,OAAO,CAACC,IAAI,CACV,qEAAqE,GACnE,+FACJ,CAAC;IAEDJ,cAAc,GAAG,IAAI;EACvB;;EAEA;EACA,MAAMK,KAAK,GAAG,IAAIC,UAAU,CAACJ,KAAK,CAACK,MAAM,EAAEL,KAAK,CAACM,UAAU,EAAEN,KAAK,CAACO,UAAU,CAAC;EAE9E,KAAK,IAAIC,CAAC,GAAG,CAAC,EAAEC,CAAC,GAAG,CAAC,EAAED,CAAC,GAAGL,KAAK,CAACO,MAAM,EAAEF,CAAC,EAAE,EAAE;IAC5C,IAAI,CAACA,CAAC,GAAG,IAAI,MAAM,CAAC,EAAE;MACpBC,CAAC,GAAGE,IAAI,CAACC,MAAM,CAAC,CAAC,GAAG,WAAW;IACjC;IAEAT,KAAK,CAACK,CAAC,CAAC,GAAIC,CAAC,MAAM,CAACD,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,GAAI,IAAI;EAC7C;EAEA,OAAOR,KAAK;AACd","ignoreList":[]}

package/lib/typescript/package.json

@@ -0,0 +1 @@
+{"type":"module"}

package/lib/typescript/src/NativeGetRandomValues.d.ts

@@ -0,0 +1,5 @@
+export interface Spec {
+    getRandomBase64(byteLength: number): string;
+}
+export declare function getNativeGetRandomValues(): Spec;
+//# sourceMappingURL=NativeGetRandomValues.d.ts.map

package/lib/typescript/src/NativeGetRandomValues.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NativeGetRandomValues.d.ts","sourceRoot":"","sources":["../../../src/NativeGetRandomValues.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,IAAI;IACnB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAAA;CAC5C;AAED,wBAAgB,wBAAwB,IAAI,IAAI,CAU/C"}

package/lib/typescript/src/constants.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Maximum number of bytes `crypto.getRandomValues()` may fill in a single call.
+ *
+ * The WebCrypto spec sets this quota at 65,536 bytes. Browsers throw a
+ * `QuotaExceededError` DOMException when `array.byteLength` exceeds it.
+ *
+ * Notes for this polyfill:
+ * - The check uses `byteLength`, not `length`. For example,
+ *   `Uint16Array(40_000)` has `length === 40_000` but
+ *   `byteLength === 80_000`, so it must throw.
+ * - Hermes (React Native) has no `DOMException`, so `getRandomValues`
+ *   throws a plain `Error` with `error.name = 'QuotaExceededError'` instead.
+ *   Browser-style `catch (e) { e.name === 'QuotaExceededError' }` code keeps
+ *   working.
+ * - A zero-length array short-circuits before any Expo/native call.
+ */
+export declare const MAX_BYTE_LENGTH = 65536;
+/**
+ * Reverse lookup table for standard base64 decoding.
+ *
+ * The native module can only return random bytes as a base64 `string` over
+ * the synchronous bridge, so JS decodes it back to bytes without an
+ * external dependency.
+ *
+ * How it works:
+ * - The base64 alphabet `'A-Za-z0-9+/'` maps index -> 6-bit value
+ *   (`'A' === 0`, ..., `'/' === 63`).
+ * - This table inverts that: `table[charCode] === 6-bit value`, built once
+ *   at module load via the IIFE below.
+ * - The table has 128 slots (one per ASCII code). Slots are pre-filled with
+ *   `-1` as an "invalid character" marker; only the 64 alphabet codes are
+ *   overwritten. `'='` padding is handled separately by the decoder (mapped
+ *   to `0`), and any lookup that still yields `-1` (or `undefined ?? -1`
+ *   for char codes > 127) makes `base64ToBytes` throw
+ *   `'Invalid base64 character'`.
+ *
+ * Decode math (per 4-char block in `base64ToBytes`):
+ * - `triplet = (a << 18) | (b << 12) | (c << 6) | d` reassembles 4 x 6 bits
+ *   into 24 bits, then splits into 3 bytes via `>> 16`, `>> 8`, `& 0xff`.
+ * - `outputLength = (clean.length / 4) * 3 - padding` accounts for trailing
+ *   `'='` / `'=='`, and `outIndex < outputLength` guards drop padding bytes.
+ */
+export declare const BASE64_LOOKUP: number[];
+//# sourceMappingURL=constants.d.ts.map

package/lib/typescript/src/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/constants.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,eAAe,QAAS,CAAA;AAErC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,aAAa,UAWtB,CAAA"}

package/lib/typescript/src/index.d.ts

@@ -0,0 +1,6 @@
+export { getRandomValues } from './utils/get-random-values.js';
+export type { GetRandomValuesFn } from './utils/get-random-values.js';
+export declare function installGetRandomValues(options?: {
+    force?: boolean;
+}): void;
+//# sourceMappingURL=index.d.ts.map

package/lib/typescript/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.tsx"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA2B,CAAA;AAC3D,YAAY,EAAE,iBAAiB,EAAE,MAAM,8BAA2B,CAAA;AAElE,wBAAgB,sBAAsB,CAAC,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAU1E"}

package/lib/typescript/src/utils/base64-decode.d.ts

@@ -0,0 +1,2 @@
+export declare function base64ToBytes(base64: string): Uint8Array;
+//# sourceMappingURL=base64-decode.d.ts.map

package/lib/typescript/src/utils/base64-decode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base64-decode.d.ts","sourceRoot":"","sources":["../../../../src/utils/base64-decode.ts"],"names":[],"mappings":"AAEA,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAwDxD"}

package/lib/typescript/src/utils/chrome.d.ts

@@ -0,0 +1,2 @@
+export declare function isRemoteDebuggingInChrome(): boolean;
+//# sourceMappingURL=chrome.d.ts.map

package/lib/typescript/src/utils/chrome.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chrome.d.ts","sourceRoot":"","sources":["../../../../src/utils/chrome.ts"],"names":[],"mappings":"AAEA,wBAAgB,yBAAyB,IAAI,OAAO,CAenD"}

package/lib/typescript/src/utils/get-random-values.d.ts

@@ -0,0 +1,3 @@
+export type GetRandomValuesFn = <T extends ArrayBufferView>(array: T) => T;
+export declare function getRandomValues<T extends ArrayBufferView>(array: T): T;
+//# sourceMappingURL=get-random-values.d.ts.map

package/lib/typescript/src/utils/get-random-values.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-random-values.d.ts","sourceRoot":"","sources":["../../../../src/utils/get-random-values.ts"],"names":[],"mappings":"AAyBA,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,SAAS,eAAe,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,CAAA;AAE1E,wBAAgB,eAAe,CAAC,CAAC,SAAS,eAAe,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAqDtE"}

package/lib/typescript/src/utils/insecure-random-values.d.ts

@@ -0,0 +1,2 @@
+export declare function insecureRandomValues<T extends ArrayBufferView>(array: T): T;
+//# sourceMappingURL=insecure-random-values.d.ts.map

package/lib/typescript/src/utils/insecure-random-values.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"insecure-random-values.d.ts","sourceRoot":"","sources":["../../../../src/utils/insecure-random-values.ts"],"names":[],"mappings":"AAEA,wBAAgB,oBAAoB,CAAC,CAAC,SAAS,eAAe,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAsB3E"}

package/package.json

@@ -0,0 +1,128 @@
+{
+  "name": "@the-polyfills/get-random-values",
+  "version": "1.0.1",
+  "description": "Polyfill for crypto.getRandomValues in React Native",
+  "main": "./lib/module/index.js",
+  "types": "./lib/typescript/src/index.d.ts",
+  "exports": {
+    ".": {
+      "the-polyfills-get-random-values-source": "./src/index.tsx",
+      "types": "./lib/typescript/src/index.d.ts",
+      "default": "./lib/module/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "src",
+    "lib",
+    "android",
+    "ios",
+    "cpp",
+    "*.podspec",
+    "react-native.config.js",
+    "!ios/build",
+    "!android/build",
+    "!android/gradle",
+    "!android/gradlew",
+    "!android/gradlew.bat",
+    "!android/local.properties",
+    "!**/__tests__",
+    "!**/__fixtures__",
+    "!**/__mocks__",
+    "!**/.*"
+  ],
+  "keywords": [
+    "react-native",
+    "ios",
+    "android"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/doanhtu07/react-native-the-polyfills.git"
+  },
+  "author": "Anh Tu Do <doanhtu07@gmail.com> (https://github.com/doanhtu07)",
+  "license": "MIT",
+  "bugs": {
+    "url": "https://github.com/doanhtu07/react-native-the-polyfills/issues"
+  },
+  "homepage": "https://github.com/doanhtu07/react-native-the-polyfills#readme",
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org/"
+  },
+  "devDependencies": {
+    "@eslint/compat": "^2.1.1",
+    "@eslint/eslintrc": "^3.3.7",
+    "@eslint/js": "^10.0.1",
+    "@jest/globals": "^30.5.2",
+    "@react-native/babel-preset": "0.87.1",
+    "@react-native/eslint-config": "0.87.1",
+    "@types/react": "~19.0.14",
+    "del-cli": "^7.0.0",
+    "eslint": "^10.11.0",
+    "eslint-config-prettier": "^10.1.8",
+    "eslint-plugin-ft-flow": "^3.0.11",
+    "eslint-plugin-prettier": "^5.5.6",
+    "jest": "^30.5.2",
+    "nodemon": "^3.1.14",
+    "prettier": "^3.9.9",
+    "react": "19.0.0",
+    "react-native": "0.79.6",
+    "react-native-builder-bob": "^0.43.1",
+    "turbo": "^2.11.3",
+    "typescript": "~5.8.3"
+  },
+  "peerDependencies": {
+    "react": "*",
+    "react-native": "*"
+  },
+  "react-native-builder-bob": {
+    "source": "src",
+    "output": "lib",
+    "targets": [
+      [
+        "module",
+        {
+          "esm": true
+        }
+      ],
+      [
+        "typescript",
+        {
+          "project": "tsconfig.build.json"
+        }
+      ]
+    ]
+  },
+  "jest": {
+    "preset": "react-native",
+    "testEnvironmentOptions": {
+      "customExportConditions": [
+        "require",
+        "react-native",
+        "<%- project.sourceCondition -%>"
+      ]
+    },
+    "modulePathIgnorePatterns": [
+      "<rootDir>/example/node_modules",
+      "<rootDir>/lib/"
+    ]
+  },
+  "create-react-native-library": {
+    "type": "turbo-module",
+    "languages": "kotlin-objc",
+    "tools": [
+      "eslint",
+      "jest"
+    ],
+    "version": "0.63.1"
+  },
+  "scripts": {
+    "clean": "del-cli android/build example/android/build example/android/app/build example/ios/build lib",
+    "dev": "nodemon",
+    "typecheck": "tsc",
+    "lint": "eslint \"**/*.{js,ts,tsx}\"",
+    "format": "prettier",
+    "check": "pnpm typecheck && prettier --write . && eslint \"**/*.{js,ts,tsx}\" --fix",
+    "test": "jest"
+  }
+}

package/src/NativeGetRandomValues.ts

@@ -0,0 +1,21 @@
+import { NativeModules } from 'react-native'
+
+// Old Architecture (Paper) only: the native module is registered via
+// RCT_EXPORT_MODULE / ReactPackage and looked up through NativeModules.
+// There is intentionally no TurboModuleRegistry usage and no codegen spec
+// in this package.
+export interface Spec {
+  getRandomBase64(byteLength: number): string
+}
+
+export function getNativeGetRandomValues(): Spec {
+  const native = NativeModules.GetRandomValues as Spec | undefined
+
+  if (native == null || typeof native.getRandomBase64 !== 'function') {
+    throw new Error(
+      "Native module 'GetRandomValues' not found. Rebuild the app after installing the package (e.g. `expo prebuild --clean`).",
+    )
+  }
+
+  return native
+}

package/src/constants.ts

@@ -0,0 +1,55 @@
+/**
+ * Maximum number of bytes `crypto.getRandomValues()` may fill in a single call.
+ *
+ * The WebCrypto spec sets this quota at 65,536 bytes. Browsers throw a
+ * `QuotaExceededError` DOMException when `array.byteLength` exceeds it.
+ *
+ * Notes for this polyfill:
+ * - The check uses `byteLength`, not `length`. For example,
+ *   `Uint16Array(40_000)` has `length === 40_000` but
+ *   `byteLength === 80_000`, so it must throw.
+ * - Hermes (React Native) has no `DOMException`, so `getRandomValues`
+ *   throws a plain `Error` with `error.name = 'QuotaExceededError'` instead.
+ *   Browser-style `catch (e) { e.name === 'QuotaExceededError' }` code keeps
+ *   working.
+ * - A zero-length array short-circuits before any Expo/native call.
+ */
+export const MAX_BYTE_LENGTH = 65_536
+
+/**
+ * Reverse lookup table for standard base64 decoding.
+ *
+ * The native module can only return random bytes as a base64 `string` over
+ * the synchronous bridge, so JS decodes it back to bytes without an
+ * external dependency.
+ *
+ * How it works:
+ * - The base64 alphabet `'A-Za-z0-9+/'` maps index -> 6-bit value
+ *   (`'A' === 0`, ..., `'/' === 63`).
+ * - This table inverts that: `table[charCode] === 6-bit value`, built once
+ *   at module load via the IIFE below.
+ * - The table has 128 slots (one per ASCII code). Slots are pre-filled with
+ *   `-1` as an "invalid character" marker; only the 64 alphabet codes are
+ *   overwritten. `'='` padding is handled separately by the decoder (mapped
+ *   to `0`), and any lookup that still yields `-1` (or `undefined ?? -1`
+ *   for char codes > 127) makes `base64ToBytes` throw
+ *   `'Invalid base64 character'`.
+ *
+ * Decode math (per 4-char block in `base64ToBytes`):
+ * - `triplet = (a << 18) | (b << 12) | (c << 6) | d` reassembles 4 x 6 bits
+ *   into 24 bits, then splits into 3 bytes via `>> 16`, `>> 8`, `& 0xff`.
+ * - `outputLength = (clean.length / 4) * 3 - padding` accounts for trailing
+ *   `'='` / `'=='`, and `outIndex < outputLength` guards drop padding bytes.
+ */
+export const BASE64_LOOKUP = (() => {
+  const chars =
+    'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/'
+
+  const table = new Array<number>(128).fill(-1)
+
+  for (let i = 0; i < chars.length; i++) {
+    table[chars.charCodeAt(i)] = i
+  }
+
+  return table
+})()

package/src/index.tsx

@@ -0,0 +1,20 @@
+import { getRandomValues } from './utils/get-random-values'
+
+export { getRandomValues } from './utils/get-random-values'
+export type { GetRandomValuesFn } from './utils/get-random-values'
+
+export function installGetRandomValues(options?: { force?: boolean }): void {
+  const g = globalThis as any
+
+  if (typeof g.crypto !== 'object' || g.crypto === null) {
+    g.crypto = {}
+  }
+
+  if (options?.force || typeof g.crypto.getRandomValues !== 'function') {
+    g.crypto.getRandomValues = getRandomValues
+  }
+}
+
+// Side-effect import installs the polyfill, matching
+// `react-native-get-random-values` behavior.
+installGetRandomValues()

package/src/utils/base64-decode.ts

@@ -0,0 +1,59 @@
+import { BASE64_LOOKUP } from '../constants'
+
+export function base64ToBytes(base64: string): Uint8Array {
+  // Standard base64 (NO_WRAP on Android, no line breaks on iOS), may be padded.
+  const clean = base64.replace(/\s/g, '')
+
+  if (clean.length === 0) {
+    return new Uint8Array(0)
+  }
+
+  if (clean.length % 4 !== 0) {
+    throw new Error('Invalid base64 string length')
+  }
+
+  let padding = 0
+
+  if (clean.endsWith('==')) {
+    padding = 2
+  } else if (clean.endsWith('=')) {
+    padding = 1
+  }
+
+  const outputLength = (clean.length / 4) * 3 - padding
+  const output = new Uint8Array(outputLength)
+
+  let outIndex = 0
+
+  for (let i = 0; i < clean.length; i += 4) {
+    const a = BASE64_LOOKUP[clean.charCodeAt(i)] ?? -1
+
+    const b = BASE64_LOOKUP[clean.charCodeAt(i + 1)] ?? -1
+
+    const c =
+      clean[i + 2] === '=' ? 0 : (BASE64_LOOKUP[clean.charCodeAt(i + 2)] ?? -1)
+
+    const d =
+      clean[i + 3] === '=' ? 0 : (BASE64_LOOKUP[clean.charCodeAt(i + 3)] ?? -1)
+
+    if (a < 0 || b < 0 || c < 0 || d < 0) {
+      throw new Error('Invalid base64 character')
+    }
+
+    const triplet = (a << 18) | (b << 12) | (c << 6) | d
+
+    if (outIndex < outputLength) {
+      output[outIndex++] = (triplet >> 16) & 0xff
+    }
+
+    if (outIndex < outputLength) {
+      output[outIndex++] = (triplet >> 8) & 0xff
+    }
+
+    if (outIndex < outputLength) {
+      output[outIndex++] = triplet & 0xff
+    }
+  }
+
+  return output
+}

package/src/utils/chrome.ts

@@ -0,0 +1,18 @@
+declare const __DEV__: boolean | undefined
+
+export function isRemoteDebuggingInChrome(): boolean {
+  const g = globalThis as any
+
+  // Remote debugging in Chrome is not supported in bridgeless mode.
+  if ('RN$Bridgeless' in g && g.RN$Bridgeless === true) {
+    return false
+  }
+
+  try {
+    return (
+      __DEV__ !== undefined && __DEV__ && g.nativeCallSyncHook === undefined
+    )
+  } catch {
+    return false
+  }
+}

package/src/utils/get-random-values.ts

@@ -0,0 +1,81 @@
+import { MAX_BYTE_LENGTH } from '../constants'
+import { getNativeGetRandomValues } from '../NativeGetRandomValues'
+import { base64ToBytes } from './base64-decode'
+import { isRemoteDebuggingInChrome } from './chrome'
+import { insecureRandomValues } from './insecure-random-values'
+
+function isAllowedArray(value: unknown): value is ArrayBufferView {
+  if (!ArrayBuffer.isView(value) || value instanceof DataView) {
+    return false
+  }
+
+  // WebCrypto only allows integer TypedArrays (no float16/32/64).
+  return (
+    value instanceof Int8Array ||
+    value instanceof Uint8Array ||
+    value instanceof Uint8ClampedArray ||
+    value instanceof Int16Array ||
+    value instanceof Uint16Array ||
+    value instanceof Int32Array ||
+    value instanceof Uint32Array ||
+    value instanceof BigInt64Array ||
+    value instanceof BigUint64Array
+  )
+}
+
+export type GetRandomValuesFn = <T extends ArrayBufferView>(array: T) => T
+
+export function getRandomValues<T extends ArrayBufferView>(array: T): T {
+  if (!isAllowedArray(array)) {
+    throw new TypeError(
+      'crypto.getRandomValues: expected an integer TypedArray (e.g. Uint8Array)',
+    )
+  }
+
+  if (array.byteLength > MAX_BYTE_LENGTH) {
+    // Browsers throw QuotaExceededError (DOMException). RN Hermes may not
+    // have DOMException, so use a plain Error with the same name.
+    const error = new Error(
+      `crypto.getRandomValues: byteLength ${array.byteLength} exceeds ${MAX_BYTE_LENGTH}`,
+    )
+    error.name = 'QuotaExceededError'
+    throw error
+  }
+
+  if (array.byteLength === 0) {
+    return array
+  }
+
+  // Expo SDK 48+: prefer ExpoCrypto when available so managed workflow
+  // apps don't need our native module linked.
+
+  const expoGetRandomValues = (globalThis as any)?.expo?.modules?.ExpoCrypto
+    ?.getRandomValues as ((array: ArrayBufferView) => void) | undefined
+
+  if (typeof expoGetRandomValues === 'function') {
+    // ExpoCrypto mutates the array in place and returns void.
+    expoGetRandomValues.call((globalThis as any).expo.modules.ExpoCrypto, array)
+    return array
+  }
+
+  // Remote debugging in Chrome can't call sync native methods
+  // ("Calling synchronous methods on native modules is not supported in
+  // Chrome"), so fall back to Math.random() there.
+  if (isRemoteDebuggingInChrome()) {
+    return insecureRandomValues(array)
+  }
+
+  const base64 = getNativeGetRandomValues().getRandomBase64(array.byteLength)
+  const bytes = base64ToBytes(base64)
+
+  if (bytes.byteLength !== array.byteLength) {
+    throw new Error(
+      `crypto.getRandomValues: native returned ${bytes.byteLength} bytes, expected ${array.byteLength}`,
+    )
+  }
+
+  // Write through to the underlying buffer so BigInt arrays work too.
+  new Uint8Array(array.buffer, array.byteOffset, array.byteLength).set(bytes)
+
+  return array
+}

package/src/utils/insecure-random-values.ts

@@ -0,0 +1,25 @@
+let insecureWarned = false
+
+export function insecureRandomValues<T extends ArrayBufferView>(array: T): T {
+  if (!insecureWarned) {
+    console.warn(
+      'crypto.getRandomValues: using an insecure random number generator, ' +
+        'this should only happen when running in a debugger without support for crypto.getRandomValues',
+    )
+
+    insecureWarned = true
+  }
+
+  // Fill through a Uint8 view so BigInt arrays work too.
+  const bytes = new Uint8Array(array.buffer, array.byteOffset, array.byteLength)
+
+  for (let i = 0, r = 0; i < bytes.length; i++) {
+    if ((i & 0x03) === 0) {
+      r = Math.random() * 0x100000000
+    }
+
+    bytes[i] = (r >>> ((i & 0x03) << 3)) & 0xff
+  }
+
+  return array
+}