entropy.go

package crypto

import (
	"crypto/rand"
	"encoding/hex"
	"errors"
)

// EntropySize represents the size of the entropy in bits, i.e. Entropy128 is equal to 128 bits (or 16 bytes) of entrop
type EntropySize int

// Directly set the sizes according to NIST recommendations for entropy
// defined here: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf
const (
	Entropy112 EntropySize = 112 / 8 // 14 bytes
	Entropy128 EntropySize = 128 / 8 // 16 bytes
	Entropy192 EntropySize = 192 / 8 // 24 bytes
	Entropy256 EntropySize = 256 / 8 // 32 bytes
)

// GenerateEntropy generates a random byte array of size n bytes
func GenerateEntropy(n EntropySize) ([]byte, error) {
	if n <= 0 {
		return nil, errors.New("entropy byte size must be > 0")
	}

	bytes := make([]byte, n)
	_, err := rand.Read(bytes)
	if err != nil {
		return nil, err
	}

	return bytes, nil
}

// GenerateNonce generates a hex-encoded nonce by calling GenerateEntropy with a size of 16 bytes (128 bits)
func GenerateNonce(n EntropySize) (string, error) {
	bytes, err := GenerateEntropy(n)
	if err != nil {
		return "", err
	}

	return hex.EncodeToString(bytes), nil
}