itlaw

Definitions

Nonce is

[a] value used in security protocols that is never repeated with the same key. For example, challenges used in challenge-response authentication protocols generally must not be repeated until authentication keys are changed, or there is a possibility of a replay attack. Using a nonce as a challenge is a different requirement than a random challenge, because a nonce is not necessarily unpredictable.[1]
[a] random or non-repeating value that is included in data exchanged by a protocol, usually for the purpose of guaranteeing the transmittal of live data rather than replayed data, thus detecting and protecting against replay attacks.[2]

References

  1. NIST, Electronic Authentication Guideline 6 (NIST Special Publication 800-63) (Apr. 2006) (full-text).
  2. CNSSI 4009.