EC
ERR_CRYPTO_SIGN_KEY_REQUIRED
Node.jsERRORNotableCryptoHIGH confidence

No key provided for crypto signing operation

Production Risk

Authentication or data integrity failures if signing is skipped silently.

What this means

Thrown when sign.sign() is called without providing a key argument. The sign() method requires a private key (or secret key for HMAC) to produce a signature; calling it without one is always an error.

Why it happens
  1. 1Calling sign.sign() with undefined or null as the key argument
  2. 2Forgetting to pass the key parameter when calling sign()
  3. 3Variable holding the key was not initialised before use
How to reproduce

Triggered when the sign() method receives no key or an undefined key.

trigger — this will error
trigger — this will error
const { createSign } = require('crypto');
const sign = createSign('SHA256');
sign.update('message');
sign.sign(); // no key — throws ERR_CRYPTO_SIGN_KEY_REQUIRED

expected output

Error [ERR_CRYPTO_SIGN_KEY_REQUIRED]: No key provided to sign

Fix

Pass the private key to sign()

WHEN Always — sign() requires a key argument

Pass the private key to sign()
const { createSign, generateKeyPairSync } = require('crypto');
const { privateKey } = generateKeyPairSync('ed25519');
const sign = createSign('SHA256');
sign.update('message');
const sig = sign.sign(privateKey);

Why this works

Providing a valid private key satisfies the key-required check and allows signature computation.

Code examples
Triggerjs
const { createSign } = require('crypto');
const sign = createSign('SHA256');
sign.update('message');
sign.sign(); // no key — throws ERR_CRYPTO_SIGN_KEY_REQUIRED  // this triggers ERR_CRYPTO_SIGN_KEY_REQUIRED
Handle in try/catchjs
try {
  // operation that may throw ERR_CRYPTO_SIGN_KEY_REQUIRED
  riskyOperation()
} catch (err) {
  if (err.code === 'ERR_CRYPTO_SIGN_KEY_REQUIRED') {
    console.error('ERR_CRYPTO_SIGN_KEY_REQUIRED:', err.message)
  } else {
    throw err
  }
}
Defensive pattern to avoid itjs
// Validate inputs before calling the operation
function safe_err_crypto_sign_key_required(...args) {
  // validate args here
  return performOperation(...args)
}
What not to do

✕ Call sign.sign() without a key argument

Signatures require a key; calling without one is always an immediate error.

Same error in other languages
TypeError (missing argument)in Python→
Sources
Official documentation ↗

Node.js Error Codes Documentation

Content generated with AI assistance and reviewed for accuracy. Found an error? hello@errcodes.dev

← All Node.js errors