react-native-quick-crypto 0.7.3 → 1.0.0-beta.2

package/QuickCrypto.podspec

@@ -0,0 +1,34 @@
+require "json"
+
+package = JSON.parse(File.read(File.join(__dir__, "package.json")))
+
+Pod::UI.puts "[QuickCrypto] crypto just got quicker 💨"
+
+Pod::Spec.new do |s|
+  s.name         = "QuickCrypto"
+  s.version      = package["version"]
+  s.summary      = package["description"]
+  s.homepage     = package["homepage"]
+  s.license      = package["license"]
+  s.authors      = package["authors"]
+
+  s.platforms    = { :ios => min_ios_version_supported }
+  s.source       = { :git => "https://github.com/margelo/react-native-quick-crypto.git", :tag => "#{s.version}" }
+
+  s.source_files = [
+    # implementation (Swift)
+    "ios/**/*.{swift}",
+    # ios (Objective-C++)
+    "ios/**/*.{h,m,mm}",
+    # implementation (C++)
+    "cpp/**/*.{hpp,cpp}",
+  ]
+
+  # Add all files generated by Nitrogen
+  load 'nitrogen/generated/ios/QuickCrypto+autolinking.rb'
+  add_nitrogen_files(s)
+
+  install_modules_dependencies(s)
+  s.dependency "OpenSSL-Universal"
+
+end

package/README.md

@@ -6,6 +6,10 @@
 
 A fast implementation of Node's `crypto` module.
 
+> Note: This version `1.x` is undergoing a major refactor, porting to New Architecture, Bridgeless, and [`Nitro Modules`](https://github.com/mrousavy/react-native-nitro) and is incomplete compared to the `0.x` version.  Status, as always, will be represented in [implementation-coverage.md](../blob/main/docs/implementation-coverage.md).
+
+## Features
+
 Unlike any other current JS-based polyfills, react-native-quick-crypto is written in C/C++ JSI and provides much greater performance - especially on mobile devices.
 QuickCrypto can be used as a drop-in replacement for your Web3/Crypto apps to speed up common cryptography functions.
 
@@ -16,6 +20,15 @@ QuickCrypto can be used as a drop-in replacement for your Web3/Crypto apps to sp
 - 🔢 Secure native compiled cryptography
 - 🔁 Easy drop-in replacement for [crypto-browserify](https://github.com/browserify/crypto-browserify) or [react-native-crypto](https://github.com/tradle/react-native-crypto)
 
+## Versions
+
+| Version | RN Architecture | Modules |
+| ------- | ------ | ------- |
+| `1.x`     | new [->](https://github.com/reactwg/react-native-new-architecture/blob/main/docs/enable-apps.md)  | Nitro Modules [->](https://github.com/margelo/react-native-nitro) |
+| `0.x`     | old  | Bridge & JSI |
+
+## Benchmarks
+
 For example, creating a Wallet using ethers.js uses complex algorithms to generate a private-key/mnemonic-phrase pair:
 
 ```ts
@@ -133,52 +146,6 @@ const hashed = QuickCrypto.createHash('sha256')
   .digest('hex');
 ```
 
----
-
-## Sponsors
-
-<!-- Onin -->
-<div align="center">
-<img height="50" src="./docs/img/sponsors/onin.svg" align="center"><br/>
-<a href="https://onin.co"><b>Onin</b></a> - This library is supported by Onin. Plan events without leaving the chat: <a href="https://onin.co">onin.co</a>
-</div>
-<br/>
-<br/>
-
-<!-- Steakwallet -->
-<div align="center">
-<img height="37" src="./docs/img/sponsors/omni.png" align="center"><br/>
-<a href="https://steakwallet.fi"><b>Omni</b></a> - Web3 for all. Access all of Web3 in one easy to use wallet. Omni supports more blockchains so you get more tokens, more yields, more NFTs, and more fun!
-</div>
-<br/>
-<br/>
-
-<!-- Litentry -->
-<div align="center">
-<img height="70" src="./docs/img/sponsors/litentry.png" align="center"><br/>
-<a href="https://litentry.com"><b>Litentry</b></a> - A decentralized identity aggregator, providing the structure and tools to empower you and your identity.
-</div>
-<br/>
-<br/>
-
-<!-- WalletConnect -->
-<div align="center">
-<img height="35" src="./docs/img/sponsors/walletconnect.png" align="center"><br/>
-<a href="https://walletconnect.com"><b>WalletConnect</b></a> - The communications protocol for web3, WalletConnect brings the ecosystem together by enabling wallets and apps to securely connect and interact.
-</div>
-<br/>
-<br/>
-
-<!-- WalletConnect -->
-
-<!-- THORSwap -->
-<div align="center">
-<img height="40" src="./docs/img/sponsors/thorswap.png" align="center"><br/>
-<a href="https://thorswap.finance"><b>THORSwap</b></a> - THORSwap is a cross-chain DEX aggregator that enables users to swap native assets across chains, provide liquidity to earn yield, and more. THORSwap is fully permissionless and non-custodial. No account signup, your wallet, your keys, your coins.
-</div>
-<br/>
-<br/>
-
 ## Limitations
 
 As the library uses JSI for synchronous native methods access, remote debugging (e.g. with Chrome) is no longer possible. Instead, you should use [Flipper](https://fbflipper.com).

package/android/CMakeLists.txt

@@ -1,76 +1,44 @@
-project(ReactNativeQuickCrypto)
-cmake_minimum_required(VERSION 3.10.2)
+cmake_minimum_required(VERSION 3.9.0)
 
-set(PACKAGE_NAME "reactnativequickcrypto")
-set(BUILD_DIR ${CMAKE_SOURCE_DIR}/build)
-set(CMAKE_VERBOSE_MAKEFILE ON)
-set(CMAKE_CXX_STANDARD 17)
-
-# set (CMAKE_C_FLAGS_DEBUG "${CMAKE_C_FLAGS_DEBUG} -g")
-# set (CMAKE_CXX_FLAGS_DEBUG "${CMAKE_CXX_FLAGS_DEBUG} -g")
+project(QuickCrypto)
+set(PACKAGE_NAME QuickCrypto)
 
-# Third party libraries (Prefabs)
-find_package(fbjni REQUIRED CONFIG)
-find_package(ReactAndroid REQUIRED CONFIG)
-find_package(openssl REQUIRED CONFIG)
-find_library(LOG_LIB log)
+set(CMAKE_VERBOSE_MAKEFILE ON)
+set(CMAKE_CXX_STANDARD 20)
 
+# Define C++ library and add all sources
 add_library(
-  ${PACKAGE_NAME}
-  SHARED
-  "src/main/cpp/cpp-adapter.cpp"
-  "../cpp/MGLQuickCryptoHostObject.cpp"
-  "../cpp/JSIUtils/MGLTypedArray.cpp"
-  "../cpp/Utils/MGLDispatchQueue.cpp"
-  "../cpp/JSIUtils/MGLThreadAwareHostObject.cpp"
-  "../cpp/JSIUtils/MGLSmartHostObject.cpp"
-  "../cpp/HMAC/MGLHmacInstaller.cpp"
-  "../cpp/HMAC/MGLHmacHostObject.cpp"
-  "../cpp/fastpbkdf2/MGLPbkdf2HostObject.cpp"
-  "../cpp/fastpbkdf2/fastpbkdf2.c"
-  "../cpp/Random/MGLRandomHostObject.cpp"
-  "../cpp/Hash/MGLHashInstaller.cpp"
-  "../cpp/Hash/MGLHashHostObject.cpp"
-  "../cpp/Cipher/MGLCipherHostObject.cpp"
-  "../cpp/Cipher/MGLCreateCipherInstaller.cpp"
-  "../cpp/Cipher/MGLCreateDecipherInstaller.cpp"
-  "../cpp/MGLKeys.cpp"
-  "../cpp/Utils/MGLUtils.cpp"
-  "../cpp/Cipher/MGLRsa.cpp"
-  "../cpp/Cipher/MGLGenerateKeyPairInstaller.cpp"
-  "../cpp/Cipher/MGLGenerateKeyPairSyncInstaller.cpp"
-  "../cpp/Sig/MGLSignInstaller.cpp"
-  "../cpp/Sig/MGLVerifyInstaller.cpp"
-  "../cpp/Sig/MGLSignHostObjects.cpp"
-  "../cpp/webcrypto/MGLWebCrypto.cpp"
-  "../cpp/webcrypto/crypto_aes.cpp"
-  "../cpp/webcrypto/crypto_ec.cpp"
-  "../cpp/webcrypto/crypto_keygen.cpp"
+  ${PACKAGE_NAME} SHARED
+  src/main/cpp/cpp-adapter.cpp
+  ../cpp/random/HybridRandom.cpp
 )
 
-target_include_directories(
-  ${PACKAGE_NAME}
-  PRIVATE
-  "../cpp"
-  "src/main/cpp"
-  "${NODE_MODULES_DIR}/react-native/ReactCommon"
-  "${NODE_MODULES_DIR}/react-native/ReactCommon/callinvoker"
-  "${NODE_MODULES_DIR}/react-native/ReactAndroid/src/main/jni/react/turbomodule"
-  "${NODE_MODULES_DIR}/react-native/ReactCommon/jsi"
-  "${NODE_MODULES_DIR}/react-native/ReactCommon/turbomodule/core"
-  "${NODE_MODULES_DIR}/react-native/ReactCommon/react/nativemodule/core"
-)
+include_directories(../cpp)
+include(${CMAKE_SOURCE_DIR}/../nitrogen/generated/android/QuickCrypto+autolinking.cmake)
 
-#file(GLOB LIBRN_DIR "${BUILD_DIR}/react-native-0*/jni/${ANDROID_ABI}")
+# Third party libraries (Prefabs)
+find_library(LOG_LIB log)
+
+find_package(ReactAndroid REQUIRED CONFIG)
+find_package(fbjni REQUIRED CONFIG)
+find_package(openssl REQUIRED CONFIG)
 
+# Link all libraries together
 target_link_libraries(
   ${PACKAGE_NAME}
-  ReactAndroid::turbomodulejsijni
-  fbjni::fbjni                           # <-- fbjni
   ${LOG_LIB}                             # <-- Logcat logger
-  ReactAndroid::jsi                      # <-- RN: JSI
-  ReactAndroid::reactnativejni           # <-- RN: React Native JNI bindings
-  ReactAndroid::react_nativemodule_core  # <-- RN: React Native native module core
-  android                                # <-- Android JNI core
+  android                                # <-- Android core
+  fbjni::fbjni                           # <-- Facebook C++ JNI helpers
   openssl::crypto                        # <-- OpenSSL (Crypto)
-)
+  ReactAndroid::jsi
+  ReactAndroid::turbomodulejsijni
+  ReactAndroid::react_nativemodule_core
+  ReactAndroid::react_render_core
+  ReactAndroid::runtimeexecutor
+  ReactAndroid::fabricjni
+  ReactAndroid::react_debug
+  ReactAndroid::react_render_core
+  ReactAndroid::react_render_componentregistry
+  ReactAndroid::rrc_view
+  ReactAndroid::folly_runtime
+  )

package/android/build.gradle

@@ -1,118 +1,56 @@
-import java.nio.file.Paths
-import com.android.Version
-
-def agpVersion = com.android.Version.ANDROID_GRADLE_PLUGIN_VERSION
-def agpVersionMajor = agpVersion.tokenize('.')[0].toInteger()
-def agpVersionMinor = agpVersion.tokenize('.')[1].toInteger()
-
 buildscript {
+  ext.kotlinVersion = '1.9.25'
+
   repositories {
-    maven {
-      url "https://plugins.gradle.org/m2/"
-    }
-    mavenCentral()
     google()
+    mavenCentral()
   }
 
   dependencies {
-    classpath("com.android.tools.build:gradle:8.3.1")
+    classpath "com.android.tools.build:gradle:8.2.2"
+    classpath "org.jetbrains.kotlin:kotlin-gradle-plugin:${kotlinVersion}"
   }
 }
 
-def isNewArchitectureEnabled() {
-  // To opt-in for the New Architecture, you can either:
-  // - Set `newArchEnabled` to true inside the `gradle.properties` file
-  // - Invoke gradle with `-newArchEnabled=true`
-  // - Set an environment variable `ORG_GRADLE_PROJECT_newArchEnabled=true`
-  return project.hasProperty("newArchEnabled") && project.newArchEnabled == "true"
+def reactNativeArchitectures() {
+  def value = rootProject.getProperties().get("reactNativeArchitectures")
+  return value ? value.split(",") : ["armeabi-v7a", "x86", "x86_64", "arm64-v8a"]
 }
 
-def resolveBuildType() {
-    Gradle gradle = getGradle()
-    String tskReqStr = gradle.getStartParameter().getTaskRequests()['args'].toString()
-
-    return tskReqStr.contains('Release') ? 'release' : 'debug'
+def isNewArchitectureEnabled() {
+  return rootProject.hasProperty("newArchEnabled") && rootProject.getProperty("newArchEnabled") == "true"
 }
 
+apply plugin: "com.android.library"
+apply plugin: "org.jetbrains.kotlin.android"
+apply from: "../nitrogen/generated/android/QuickCrypto+autolinking.gradle"
+
 if (isNewArchitectureEnabled()) {
   apply plugin: "com.facebook.react"
 }
-apply plugin: 'com.android.library'
-
-def safeExtGet(prop, fallback) {
-  rootProject.ext.has(prop) ? rootProject.ext.get(prop) : fallback
-}
 
-def reactNativeArchitectures() {
-  def value = project.getProperties().get("reactNativeArchitectures")
-  return value ? value.split(",") : ["armeabi-v7a", "x86", "x86_64", "arm64-v8a"]
+def getExtOrDefault(name) {
+  return rootProject.ext.has(name) ? rootProject.ext.get(name) : project.properties["QuickCrypto_" + name]
 }
 
-static def findNodeModules(baseDir) {
-  def basePath = baseDir.toPath().normalize()
-  // Node's module resolution algorithm searches up to the root directory,
-  // after which the base path will be null
-  while (basePath) {
-    def nodeModulesPath = Paths.get(basePath.toString(), "node_modules")
-    def reactNativePath = Paths.get(nodeModulesPath.toString(), "react-native")
-    if (nodeModulesPath.toFile().exists() && reactNativePath.toFile().exists()) {
-      return nodeModulesPath.toString()
-    }
-    basePath = basePath.getParent()
-  }
-  throw new GradleException("react-native-quick-crypto: Failed to find node_modules/ path!")
-}
-
-def nodeModules = findNodeModules(projectDir)
-
-repositories {
-  google()
-  mavenCentral()
+def getExtOrIntegerDefault(name) {
+  return rootProject.ext.has(name) ? rootProject.ext.get(name) : (project.properties["QuickCrypto_" + name]).toInteger()
 }
 
 android {
-  compileSdkVersion safeExtGet("compileSdkVersion", 31)
-
-  if ((agpVersionMajor == 7 && agpVersionMinor >= 3) || agpVersionMajor >= 8) {
-    // Namespace support was added in 7.3.0
-    namespace "com.margelo.quickcrypto"
-
-    sourceSets {
-      main {
-        manifest.srcFile "src/main/AndroidManifestNew.xml"
-      }
-    }
-  }
-
-  if (agpVersionMajor >= 8) {
-      buildFeatures {
-          buildConfig = true
-      }
-  }
-
-  // Used to override the NDK path/version on internal CI or by allowing
-  // users to customize the NDK path/version from their root project (e.g. for M1 support)
-  if (rootProject.hasProperty("ndkPath")) {
-    ndkPath rootProject.ext.ndkPath
-  }
-  if (rootProject.hasProperty("ndkVersion")) {
-    ndkVersion rootProject.ext.ndkVersion
-  }
-
-  buildFeatures {
-    prefab true
-  }
+  namespace "com.margelo.nitro.quickcrypto"
+  ndkVersion getExtOrDefault("ndkVersion")
+  compileSdkVersion getExtOrIntegerDefault("compileSdkVersion")
 
   defaultConfig {
-    minSdkVersion safeExtGet('minSdkVersion', 28)
-    targetSdkVersion safeExtGet('targetSdkVersion', 31)
-    versionCode 1
-    versionName "1.0"
+    minSdkVersion getExtOrIntegerDefault("minSdkVersion")
+    targetSdkVersion getExtOrIntegerDefault("targetSdkVersion")
     buildConfigField "boolean", "IS_NEW_ARCHITECTURE_ENABLED", isNewArchitectureEnabled().toString()
+
     externalNativeBuild {
       cmake {
-        cppFlags "-O2 -frtti -fexceptions -Wall -Wno-unused-variable -fstack-protector-all -DANDROID"
-        arguments "-DANDROID_STL=c++_shared", "-DNODE_MODULES_DIR=${nodeModules}"
+        cppFlags "-O2 -frtti -fexceptions -Wall -fstack-protector-all"
+        arguments "-DANDROID_STL=c++_shared"
         abiFilters (*reactNativeArchitectures())
       }
     }
@@ -124,42 +62,36 @@ android {
     }
   }
 
-  packagingOptions {
-    doNotStrip resolveBuildType() == 'debug' ? "**/**/*.so" : ''
-    excludes = [
-            "**/libc++_shared.so",
-            "**/libfbjni.so",
-            "**/libreactnativejni.so",
-            "**/libjsi.so",
-            "**/libreact_nativemodule_core.so",
-            "**/libturbomodulejsijni.so",
-            "**/MANIFEST.MF",
-    ]
+  buildFeatures {
+    buildConfig true
+    prefab true
   }
 
   buildTypes {
     release {
       minifyEnabled false
     }
-    debug {
-      packagingOptions {
-        doNotStrip '**/*.so'
-      }
-      minifyEnabled false
-      debuggable true
-      jniDebuggable true
-      renderscriptDebuggable true
-    }
   }
 
   lintOptions {
-    disable 'GradleCompatible'
+    disable "GradleCompatible"
   }
+
   compileOptions {
     sourceCompatibility JavaVersion.VERSION_1_8
     targetCompatibility JavaVersion.VERSION_1_8
   }
 
+  sourceSets {
+    main {
+      if (isNewArchitectureEnabled()) {
+        java.srcDirs += [
+          // React Codegen files
+          "${project.buildDir}/generated/source/codegen/java"
+        ]
+      }
+    }
+  }
 }
 
 repositories {
@@ -167,24 +99,19 @@ repositories {
   google()
 }
 
+
 dependencies {
   //noinspection GradleDynamicVersion
-  implementation "com.facebook.react:react-android:+"
-  // https://mvnrepository.com/artifact/com.android.ndk.thirdparty/openssl
-  implementation 'com.android.ndk.thirdparty:openssl:1.1.1q-beta-1'
+  implementation "com.facebook.react:react-native:+"
+
+  implementation project(":react-native-nitro-modules")
+  implementation "com.android.ndk.thirdparty:openssl:1.1.1q-beta-1"
 }
 
-// Resolves "LOCAL_SRC_FILES points to a missing file, Check that libfb.so exists or that its path is correct".
-tasks.whenTaskAdded { task ->
-  if (task.name.contains("configureCMakeDebug")) {
-    rootProject.getTasksByName("packageReactNdkDebugLibs", true).forEach {
-      task.dependsOn(it)
-    }
-  }
-  // We want to add a dependency for both configureCMakeRelease and configureCMakeRelWithDebInfo
-  if (task.name.contains("configureCMakeRel")) {
-    rootProject.getTasksByName("packageReactNdkReleaseLibs", true).forEach {
-      task.dependsOn(it)
-    }
+if (isNewArchitectureEnabled()) {
+  react {
+    jsRootDir = file("../src/")
+    libraryName = "QuickCrypto"
+    codegenJavaPackageName = "com.margelo.nitro.quickcrypto"
   }
-}
+}

package/android/gradle.properties

@@ -1,6 +1,6 @@
-QuickCrypto_compileSdkVersion=31
-QuickCrypto_targetSdkVersion=31
-QuickCrypto_ndkversion=21.4.7075529
-QuickCrypto_minSdkVersion=28
+QuickCrypto_compileSdkVersion=34
+QuickCrypto_targetSdkVersion=34
+QuickCrypto_minSdkVersion=23
+QuickCrypto_ndkVersion=21.4.7075529
 
 android.useAndroidX=true

package/android/src/main/cpp/cpp-adapter.cpp

@@ -1,60 +1,15 @@
-#include <ReactCommon/CallInvokerHolder.h>
-#include <fbjni/fbjni.h>
 #include <jni.h>
-#include <jsi/jsi.h>
 
-#include "MGLQuickCryptoHostObject.h"
+#include "random/HybridRandom.hpp"
+#include <NitroModules/HybridObjectRegistry.hpp>
 
-using namespace facebook;
+using namespace margelo::nitro::crypto;
+using namespace margelo::crypto;
 
-class CryptoCppAdapter : public jni::HybridClass<CryptoCppAdapter> {
- public:
-  static auto constexpr kJavaDescriptor =
-      "Lcom/margelo/quickcrypto/QuickCryptoModule;";
+JNIEXPORT jint JNICALL JNI_OnLoad(JavaVM* vm, void*) {
+  HybridObjectRegistry::registerHybridObjectConstructor(
+    "Random", []() -> std::shared_ptr<HybridObject> { return std::make_shared<HybridRandom>();
+  });
 
-  static jni::local_ref<jni::HybridClass<CryptoCppAdapter>::jhybriddata>
-  initHybrid(jni::alias_ref<jhybridobject> jThis) {
-    return makeCxxInstance();
-  }
-
-  CryptoCppAdapter() {}
-
-  void install(jsi::Runtime &runtime,
-               std::shared_ptr<facebook::react::CallInvoker> jsCallInvoker) {
-    auto workerQueue = std::make_shared<margelo::DispatchQueue::dispatch_queue>(
-        "margelo crypto worker thread");
-    auto hostObject = std::make_shared<margelo::MGLQuickCryptoHostObject>(
-        jsCallInvoker, workerQueue);
-    auto object = jsi::Object::createFromHostObject(runtime, hostObject);
-    runtime.global().setProperty(runtime, "__QuickCryptoProxy",
-                                 std::move(object));
-  }
-
-  void nativeInstall(
-      jlong jsiPtr,
-      jni::alias_ref<facebook::react::CallInvokerHolder::javaobject>
-          jsCallInvokerHolder) {
-    auto jsCallInvoker = jsCallInvokerHolder->cthis()->getCallInvoker();
-    auto runtime = reinterpret_cast<jsi::Runtime *>(jsiPtr);
-    if (runtime) {
-      install(*runtime, jsCallInvoker);
-    }
-    // if runtime was nullptr, QuickCrypto will not be installed. This should
-    // only happen while Remote Debugging (Chrome), but will be weird either
-    // way.
-  }
-
-  static void registerNatives() {
-    registerHybrid(
-        {makeNativeMethod("initHybrid", CryptoCppAdapter::initHybrid),
-         makeNativeMethod("nativeInstall", CryptoCppAdapter::nativeInstall)});
-  }
-
- private:
-  friend HybridBase;
-};
-
-JNIEXPORT jint JNICALL JNI_OnLoad(JavaVM *vm, void *) {
-  return facebook::jni::initialize(vm,
-                                   [] { CryptoCppAdapter::registerNatives(); });
+  return JNI_VERSION_1_2;
 }

package/android/src/main/java/com/margelo/nitro/quickcrypto/QuickCryptoPackage.java

@@ -0,0 +1,38 @@
+package com.margelo.nitro.quickcrypto;
+
+import android.util.Log;
+import androidx.annotation.Nullable;
+
+import com.facebook.react.bridge.NativeModule;
+import com.facebook.react.bridge.ReactApplicationContext;
+import com.facebook.react.module.model.ReactModuleInfoProvider;
+import com.facebook.react.TurboReactPackage;
+
+import java.util.HashMap;
+
+public class QuickCryptoPackage extends TurboReactPackage {
+  private static final String TAG = "QuickCrypto";
+  static {
+    try {
+      Log.i(TAG, "Loading C++ library...");
+      System.loadLibrary(TAG);
+      Log.i(TAG, "Successfully loaded C++ library!");
+    } catch (Throwable e) {
+      Log.e(TAG, "Failed to load C++ library! Is it properly installed and linked?", e);
+      throw e;
+    }
+  }
+
+  @Nullable
+  @Override
+  public NativeModule getModule(String name, ReactApplicationContext reactContext) {
+    return null;
+  }
+
+  @Override
+  public ReactModuleInfoProvider getReactModuleInfoProvider() {
+    return () -> {
+      return new HashMap<>();
+    };
+  }
+}

package/cpp/random/HybridRandom.cpp

@@ -0,0 +1,34 @@
+#include "HybridRandom.hpp"
+
+#include <openssl/err.h>
+#include <openssl/rand.h>
+
+namespace margelo::crypto {
+
+using namespace margelo::nitro;
+using namespace margelo::nitro::crypto;
+
+std::future<std::shared_ptr<ArrayBuffer>> HybridRandom::randomFill(const std::shared_ptr<ArrayBuffer>& buffer, double dOffset,
+                                                                   double dSize) {
+  size_t size = checkSize(dSize);
+  // copy the JSArrayBuffer that we do not own into a NativeArrayBuffer that we do own, before passing to sync function
+  uint8_t* data = new uint8_t[size];
+  memcpy(data, buffer.get()->data(), size);
+  std::shared_ptr<ArrayBuffer> nativeBuffer = std::make_shared<NativeArrayBuffer>(data, size, false);
+
+  return std::async(std::launch::async,
+                    [this, nativeBuffer, dOffset, dSize]() { return this->randomFillSync(nativeBuffer, dOffset, dSize); });
+};
+
+std::shared_ptr<ArrayBuffer> HybridRandom::randomFillSync(const std::shared_ptr<ArrayBuffer>& buffer, double dOffset, double dSize) {
+  size_t size = checkSize(dSize);
+  size_t offset = checkOffset(dSize, dOffset);
+  uint8_t* data = buffer.get()->data();
+
+  if (RAND_bytes(data + offset, (int)size) != 1) {
+    throw std::runtime_error("error calling RAND_bytes" + std::to_string(ERR_get_error()));
+  }
+  return std::make_shared<NativeArrayBuffer>(data, size, false);
+};
+
+} // namespace margelo::crypto

package/cpp/random/HybridRandom.hpp

@@ -0,0 +1,44 @@
+#include <NitroModules/ArrayBuffer.hpp>
+#include <cmath>
+#include <future>
+
+#include "HybridRandomSpec.hpp"
+
+#ifdef ANDROID
+#include "utils/Utils.hpp"
+#else
+#include "Utils.hpp"
+#endif
+
+namespace margelo::crypto {
+
+using namespace margelo::nitro;
+using namespace margelo::nitro::crypto;
+
+class HybridRandom : public HybridRandomSpec {
+public:
+  std::future<std::shared_ptr<ArrayBuffer>> randomFill(const std::shared_ptr<ArrayBuffer>& buffer, double dOffset, double dSize) override;
+  std::shared_ptr<ArrayBuffer> randomFillSync(const std::shared_ptr<ArrayBuffer>& buffer, double dOffset, double dSize) override;
+};
+
+inline size_t checkSize(double size) {
+  if (!CheckIsUint32(size)) {
+    throw std::runtime_error("size must be uint32");
+  }
+  if (static_cast<uint32_t>(size) > pow(2, 31) - 1) {
+    throw std::runtime_error("size must be less than 2^31 - 1");
+  }
+  return static_cast<size_t>(size);
+}
+
+inline size_t checkOffset(double size, double offset) {
+  if (!CheckIsUint32(offset)) {
+    throw std::runtime_error("offset must be uint32");
+  }
+  if (offset > size) {
+    throw std::runtime_error("offset must be less than size");
+  }
+  return static_cast<size_t>(offset);
+}
+
+} // namespace margelo::crypto

package/cpp/utils/Utils.hpp

@@ -0,0 +1,9 @@
+#include <limits>
+
+inline bool CheckIsUint32(double value) {
+  return (value >= std::numeric_limits<uint32_t>::lowest() && value <= std::numeric_limits<uint32_t>::max());
+}
+
+inline bool CheckIsInt32(double value) {
+  return (value >= std::numeric_limits<int32_t>::lowest() && value <= std::numeric_limits<int32_t>::max());
+}