sjcl is long deprecated, and it has a [new CVE](https://nvd.nist.gov/vuln/detail/CVE-2026-4258). You should be able to use node's built-in crypto module instead.