secure-random-string

secure-random-string

Node.js module that generates a cryptographically secure random string with a given length

Usage

var srs = require('secure-random-string');

Default behavior: Generate a random string 32 characters long.

// Sync
var result = srs();

// Async
srs(function(err, sr) {
	console.log(sr);
});

Options: length

Optionally, you can specify a 'length' option to specify a length.

// sync
var result = srs({length: 256});

// async
srs({length: 256}, function(err, sr) {
	console.log(sr);
});

Error handling

An error is possible if there is not enough accumulated entropy to generate cryptographically strong data. In other words, this will not block even if all entropy sources are drained. Note that the sync API throws an exception, while the async API returns the error to the callback.

Author

Simon Santoro

Contributors

Mark Stosberg

License

MIT

Changelog

[1.0.0] 2015-08-27

New Features

• New sync API was added. Like crypto.getRandomBytes(), it can throw an exception if the system is short on entropy. (#1, @markstos)

Breaking changes

• Async API now follows the Node.js convention of returning an error as the first argument to the callback. The error might be populated if the system runs out of entropy. (#2, @markstos)

• urlsafe option was removed. All strings are URL-safe now. (#4, @S2-, @markstos)