Tag Info

New answers tagged


First of all, As nonce is supposed to be random is not, strictly speaking, true. Nonce in general is only required to be unique. It is, however, often convenient to generate nonce as (pseudo-)random bytes. In this case and if the nonce is sufficiently big (say, 12+ bytes) there is no need to check against previous nonces as you will never encounter a repeat ...


You can store nonces in any way you want, e.g. in a database; also note that you don't need to store past nonces longer than their validity time. In fact, a nonce should be timestamped, and valid only during a limited time since its creation. For this, all systems (nonce producer, client, and server) need to be time synchronized.

Top 50 recent answers are included