Re: [Acme] On the entropy of the nonce

2016-05-11 Thread Martin Thomson
On 12 May 2016 at 04:48, Michele OrrĂ¹ wrote: > I also gave a look at letsencrypt/boulder[2], and as far as I've > been able to understand there is a in64 counter, and 7 bytes of > randomness that determine the nonce. Am I wrong to say that there > are less than 128 bits of

[Acme] On the entropy of the nonce

2016-05-11 Thread Michele OrrĂ¹
Dear brothers and sisters, I would like to start a small discussion around section 5.4, replay attack prevention and the introduction of a nonce. I was not able to find any thread around the "nonce" header in this working group before - hence this post. In the latest version[0] of the RFC I