diff --git a/src/cryptographic-practices/README.md b/src/cryptographic-practices/README.md
index fd50318..4b08bf7 100644
--- a/src/cryptographic-practices/README.md
+++ b/src/cryptographic-practices/README.md
@@ -147,7 +147,8 @@ func encrypt(val []byte, secret []byte) ([]byte, error) {
         return nil, err
     }
 
-    nonce := make([]byte, aead.NonceSize())
+    buffer := make([]byte, aead.NonceSize()+aead.Overhead()+len(val))
+	nonce := buffer[:aead.NonceSize()]
     if _, err = io.ReadFull(rand.Reader, nonce); err != nil {
         return nil, err
     }