Snippet

Cryptographically Secure Random Data Generation

For security-sensitive tasks like generating session IDs, password reset tokens, or API keys, Go's standard library provides the crypto/rand package. Unlike math/rand which is pseudo-random and predictable, crypto/rand interfaces with the operating system's cryptographically secure pseudorandom number generator (CSPRNG). It fills a byte slice with random bytes that can then be encoded into a hex string.

snippet.go

package main
 
import (
	"crypto/rand"
	"encoding/hex"
	"fmt"
)
 
func generateSecureToken(length int) (string, error) {
	bytes := make([]byte, length)
	_, err := rand.Read(bytes)
	if err != nil {
		return "", err
	}
	return hex.EncodeToString(bytes), nil
}
 
func main() {
	token, err := generateSecureToken(16)
	if err != nil {
		fmt.Println("Error:", err)
		return
	}
	fmt.Println("Secure Token:", token)
}

Breakdown

bytes := make([]byte, length)

Allocates a byte slice of the specified length to hold the random data.

_, err := rand.Read(bytes)

Reads cryptographically secure random bytes from the OS entropy pool into the slice.

if err != nil { return "", err }

Checks for errors, which might occur if the system runs out of entropy or fails to read.

hex.EncodeToString(bytes)

Converts the raw random bytes into a readable, hexadecimal string representation.

Previous snippet Next snippet

More Intermediate Go exercises →

Cryptographically Secure Random Data Generation

Related