"internal/byteorder"
"internal/chacha8rand"
"io"
"os"
"sync"
"syscall"
"internal/syscall/unix"
"internal/syscall/windows"
"os"
"sync"
"sync/atomic"
"time"
_ "unsafe"
"errors"
"internal/syscall/unix"
"math"
"runtime"
"syscall"
"internal/syscall/unix"
var firstUse atomic.BoolThe maximum buffer size for crypto.getRandomValues is 65536 bytes. https://developer.mozilla.org/en-US/docs/Web/API/Crypto/getRandomValues#exceptions
const maxGetRandomRead = *ast.BinaryExprvar mu sync.Mutexconst randomDevice = "/dev/random"var seedErr errorvar seeded sync.Oncevar state chacha8rand.Statevar testingOnlyFailRead boolvar urandomErr errorvar urandomFile *os.Filevar urandomOnce sync.OnceRead fills b with cryptographically secure random bytes from the operating system. It always fills b entirely and crashes the program irrecoverably if an error is encountered. The operating system APIs are documented to never return an error on all but legacy Linux systems.
func Read(b []byte)fatal is [runtime.fatal], pushed via linkname. go:linkname fatal
func fatal(string)go:wasmimport gojs runtime.getRandomData go:noescape
func getRandomValues(r []byte)arc4random_buf is the recommended application CSPRNG, accepts buffers of any size, and never returns an error. "The subsystem is re-seeded from the kernel random number subsystem on a regular basis, and also upon fork(2)." - arc4random(3) Note that despite its legacy name, it uses a secure CSPRNG (not RC4) in all supported macOS versions.
func read(b []byte) errorfunc read(b []byte) errorread calls the JavaScript Crypto.getRandomValues() method. See https://developer.mozilla.org/en-US/docs/Web/API/Crypto/getRandomValues.
func read(b []byte) errorfunc read(b []byte) errorfunc read(b []byte) errorfunc read(b []byte) errorfunc read(b []byte) errorfunc read(b []byte) errorfunc urandomRead(b []byte) errorfunc warnBlocked()Generated with Arrow