Function new_state 

pub fn new_state() -> String

A fresh state.

Unguessable is not optional: the spec requires that it “can not be forged or guessed by an untrusted party”, and it is also the row key the at-rest AAD binds against, so its entropy is load-bearing in two places.