NC

{
  "id": "MLC-T-CYB-002793",
  "term": "NC",
  "field": "Cybersecurity",
  "definition": "1. A varying value that has, at most, a negligible chance of repeating; for example, a random value that is generated anew for each use, a timestamp, a sequence number, or some combination of these.\n\n2. A time-varying value that has at most a negligible chance of repeating, for example, a random value that is generated anew for each use, a timestamp, a sequence number, or some combination of these.\n\n3. A time-varying value that has at most a negligible chance of repeating - for example, a random value that is generated anew for each use, a timestamp, a sequence number, or some combination of these.\n\n4. A time-varying value that has at most a negligible chance of repeating; for example, a random value that is generated anew for each use, a time-stamp, a sequence number, or some combination of these. It can be a secret or non-secret value.\n\n5. A value that is used only once.\n\n6. A value that is used only once within a specified context.\n\n7. A randomly generated value used to defeat “playback” attacks in communication protocols. One party randomly generates a nonce and sends it to the other party. The receiver encrypts it using the agreed upon secret key and returns it to the sender. Because the sender randomly generated the nonce, this defeats playback attacks because the replayer cannot know in advance the nonce the sender will generate. The receiver denies connections that do not have the correctly encrypted nonce.\n\n8. A time-varying value that has at most an acceptably small chance of repeating. For example, the nonce may be a random value that is generated anew for each use, a timestamp, a sequence number, or some combination of these.\n\n9. A value used in security protocols that is never repeated with the same key. For example, nonces used as challenges in challenge-response authentication protocols SHALL not be repeated until authentication keys are changed. Otherwise, there is a possibility of a replay attack. Using a nonce as a challenge is a different requirement than a random challenge, because a nonce is not necessarily unpredictable.\n\n10. A time-varying value that has at most a negligible chance of repeating, e.g., a random value that is generated anew for each use, a timestamp, a sequence number, or some combination of these.\n\n11. A time-varying value that has an acceptably small chance of repeating. For example, a nonce is a random value that is generated anew for each use, a timestamp, a sequence number, or some combination of these.\n\n12. A time-varying value that has (at most) an acceptably small chance of repeating. For example, the nonce may be a random value that is generated anew for each use, a timestamp, a sequence number, or some combination of these.\n\n13. See Cryptographic Nonce\n\n14. A time-varying value that has, at most, an acceptably small chance of repeating. For example, a nonce is a random value that is generated anew for each use, a timestamp, a sequence number, or some combination of these.\n\n15. A value used in security protocols that is never repeated with the same key. For example, nonces used as challenges in challenge-response authentication protocols must not be repeated until authentication keys are changed. Otherwise, there is a possibility of a replay attack. Using a nonce as a challenge is a different requirement than a random challenge, because a nonce is not necessarily unpredictable.",
  "expansions": [
    "Non-component",
    "Nonce"
  ],
  "references": [
    "NIST SP 800-56C Rev. 2",
    "NIST SP 800-102",
    "NIST SP 800-108 [Superseded]; NIST SP 800-56C [Superseded]",
    "NIST SP 800-135 Rev. 1",
    "NIST SP 800-38A",
    "NIST SP 800-38C; NIST SP 800-38D",
    "NIST SP 800-44 Version 2",
    "NIST SP 800-56A Rev. 2 [Superseded]",
    "NIST SP 800-63-3 [Superseded]",
    "NIST SP 800-90A Rev. 1",
    "NIST SP 800-56B Rev. 2",
    "NIST SP 800-133 Rev. 2",
    "NISTIR 8202",
    "NIST SP 800-56B Rev. 1 [Superseded]",
    "NIST SP 800-63-2 [Superseded]",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/nc/"
}