From discussion on 08/26: It may be desirable to support larger nonces. At least one existing protocol supports nonces up to 64 bytes.