2014-12-07 15:41:24 +00:00
|
|
|
// Copyright (C) 2014 The Syncthing Authors.
|
|
|
|
//
|
2015-03-07 20:36:35 +00:00
|
|
|
// This Source Code Form is subject to the terms of the Mozilla Public
|
|
|
|
// License, v. 2.0. If a copy of the MPL was not distributed with this file,
|
2017-02-09 06:52:18 +00:00
|
|
|
// You can obtain one at https://mozilla.org/MPL/2.0/.
|
2014-12-07 15:41:24 +00:00
|
|
|
|
2016-05-26 07:02:56 +00:00
|
|
|
// Package rand implements functions similar to math/rand in the standard
|
|
|
|
// library, but on top of a secure random number generator.
|
|
|
|
package rand
|
2014-12-07 15:41:24 +00:00
|
|
|
|
|
|
|
import (
|
|
|
|
cryptoRand "crypto/rand"
|
|
|
|
mathRand "math/rand"
|
2019-05-29 07:56:40 +00:00
|
|
|
"reflect"
|
2014-12-07 15:41:24 +00:00
|
|
|
)
|
|
|
|
|
2016-05-26 07:02:56 +00:00
|
|
|
// Reader is the standard crypto/rand.Reader, re-exported for convenience
|
|
|
|
var Reader = cryptoRand.Reader
|
|
|
|
|
2020-03-30 21:26:28 +00:00
|
|
|
// randomCharset contains the characters that can make up a rand.String().
|
2016-05-09 09:43:40 +00:00
|
|
|
const randomCharset = "2345679abcdefghijkmnopqrstuvwxyzACDEFGHJKLMNPQRSTUVWXYZ"
|
2014-12-07 15:41:24 +00:00
|
|
|
|
2016-05-25 06:38:38 +00:00
|
|
|
var (
|
2020-06-17 08:43:58 +00:00
|
|
|
// defaultSecureSource is a concurrency-safe, cryptographically secure
|
|
|
|
// math/rand.Source.
|
2020-03-30 21:26:28 +00:00
|
|
|
defaultSecureSource = newSecureSource()
|
2016-05-25 06:38:38 +00:00
|
|
|
|
|
|
|
// defaultSecureRand is a math/rand.Rand based on the secure source.
|
2020-03-30 21:26:28 +00:00
|
|
|
defaultSecureRand = mathRand.New(defaultSecureSource)
|
2016-05-25 06:38:38 +00:00
|
|
|
)
|
|
|
|
|
2020-06-17 08:43:58 +00:00
|
|
|
// String returns a cryptographically secure random string of characters
|
|
|
|
// (taken from randomCharset) of the specified length. The returned string
|
|
|
|
// contains ~5.8 bits of entropy per character, due to the character set used.
|
2016-05-26 07:02:56 +00:00
|
|
|
func String(l int) string {
|
2014-12-07 15:41:24 +00:00
|
|
|
bs := make([]byte, l)
|
|
|
|
for i := range bs {
|
2016-05-25 06:38:38 +00:00
|
|
|
bs[i] = randomCharset[defaultSecureRand.Intn(len(randomCharset))]
|
2014-12-07 15:41:24 +00:00
|
|
|
}
|
|
|
|
return string(bs)
|
|
|
|
}
|
|
|
|
|
2020-06-17 08:43:58 +00:00
|
|
|
// Int63 returns a cryptographically secure random int63.
|
2016-05-26 07:02:56 +00:00
|
|
|
func Int63() int64 {
|
2020-03-30 21:26:28 +00:00
|
|
|
return defaultSecureSource.Int63()
|
2016-05-26 07:02:56 +00:00
|
|
|
}
|
|
|
|
|
2020-06-17 08:43:58 +00:00
|
|
|
// Uint64 returns a cryptographically secure strongly random uint64.
|
|
|
|
func Uint64() uint64 {
|
|
|
|
return defaultSecureSource.Uint64()
|
2016-05-26 07:02:56 +00:00
|
|
|
}
|
|
|
|
|
2020-06-17 08:43:58 +00:00
|
|
|
// Intn returns, as an int, a cryptographically secure non-negative
|
|
|
|
// random number in [0,n). It panics if n <= 0.
|
2016-05-26 07:02:56 +00:00
|
|
|
func Intn(n int) int {
|
|
|
|
return defaultSecureRand.Intn(n)
|
2014-12-07 15:41:24 +00:00
|
|
|
}
|
|
|
|
|
2020-03-30 21:26:28 +00:00
|
|
|
// Shuffle the order of elements in slice.
|
2019-05-29 07:56:40 +00:00
|
|
|
func Shuffle(slice interface{}) {
|
|
|
|
rv := reflect.ValueOf(slice)
|
|
|
|
swap := reflect.Swapper(slice)
|
|
|
|
length := rv.Len()
|
|
|
|
if length < 2 {
|
|
|
|
return
|
|
|
|
}
|
|
|
|
defaultSecureRand.Shuffle(length, swap)
|
|
|
|
}
|