Node.js 22 removes crypto.createCipher, forcing Lambda upgrades

By Meridian48 News Desk · Summarised from DEV Community · July 20, 2026

Node.js 22 deletes the insecure crypto.createCipher function, breaking Lambda functions on the nodejs22.x runtime. The fix requires migrating to createCipheriv with explicit key derivation, as the old method used unsalted MD5 with one iteration. Teams upgrading ahead of Q1 2027 deadlines are hitting this issue now.

Meridian48 take

This is a long-overdue security cleanup, but the abrupt removal without a graceful fallback could catch teams off guard during Lambda runtime migrations.

Read the full reporting

"TypeError: crypto.createCipher is not a function — migrating to createCipheriv on Node.js 22 Lambda" →

DEV Community

nodejsaws-lambda

Node.js 22 removes crypto.createCipher, forcing Lambda upgrades

MCP servers add up to 62K tokens per session in Claude Code

MCP Session Architecture: Scaling Agent Integrations Without Sticky Servers

Terraform Blueprint Generator Saves AWS Devs from Copy-Paste Hell