What is a cryptographic nonce and its role in secure communications?

• A. A random seed used to initialize PRNG.
• B. A number used once to ensure freshness and prevent replay attacks in cryptographic protocols.
• C. A static key used for all encryption.
• D. An initialization vector used for stream ciphers.

Answer: (B)

A nonce is a number used once, included in each cryptographic exchange to guarantee freshness. By using a unique value for every session or message, the system can distinguish new interactions from old ones, so a captured message from the past can’t simply be replayed and accepted as legitimate. This freshness is crucial for preventing replay attacks, where an adversary reuses a valid message to trick the recipient into thinking it’s a new transaction or session.

In practice, the nonce is typically not kept secret; it’s recorded and sent as part of the protocol so both parties can verify that each run is new. It’s often combined with other data (like public keys or timestamps) to derive session keys, ensuring that even identical communication content yields different cryptographic results each time.

It’s helpful to compare with an initialization vector, which also helps start a cipher’s state in some modes. However, the defining purpose of a nonce is to ensure freshness and prevent replays, not to seed randomness or serve as a static encryption key.