diff --git a/errcheck/excludes.go b/errcheck/excludes.go
index 450b798..3e28a2f 100644
--- a/errcheck/excludes.go
+++ b/errcheck/excludes.go
@@ -17,6 +17,9 @@ var DefaultExcludedSymbols = []string{
 	"(*bytes.Buffer).WriteRune",
 	"(*bytes.Buffer).WriteString",
 
+	// crypto
+	"crypto/rand.Read", // https://github.com/golang/go/issues/66821
+
 	// fmt
 	"fmt.Print",
 	"fmt.Printf",
diff --git a/testdata/crypto_rand.go b/testdata/crypto_rand.go
new file mode 100644
index 0000000..a01766c
--- /dev/null
+++ b/testdata/crypto_rand.go
@@ -0,0 +1,10 @@
+package main
+
+import (
+	"crypto/rand"
+)
+
+func ignoreRandReaderReturns() {
+	buf := make([]byte, 128)
+	rand.Read(buf) // EXCLUDED
+}