Switch to a secure random generator
math.Random is not secure, crypto/rand.Random is...