在“ crypto / rand”成功之前生成随机字符串是个好主意吗？

Question

Is it a good idea to generate a secure random hex string until the process succeeds?

All examples I've come across show that if rand.Read returns error, we should panic, os.Exit(1) or return empty string and the error.

I need my program to continue to function in case of such errors and wait until a random string is generated. Is it a good idea to loop until the string is generated, any pitfalls with that?

import "crypto/rand"

func RandomHex() string {
    var buf [16]byte
    for {
        _, err := rand.Read(buf[:])
        if err == nil {
            break
        }
    }
    return hex.EncodeToString(buf[:])
}

Answer 1

Is it a good idea to loop until the string is generated,

That depends. Probably yes.

any pitfalls with that?

You discard the random bytes read on error. And this in a tight loop. This may drain you entropy source (depending on the OS) faster than it can be filled.

Instead of an unbound infinite loop: Break after n rounds and give up. Graceful degradation or stopping is best: If your program is stuck in an endless loop it is also not "continue"ing.