Consider variable-sized nonces

[bluegate010]

From discussion on 08/26: It may be desirable to support larger nonces. At least one existing protocol supports nonces up to 64 bytes.

[steven-bellock]

From Arm CCA:

The length MUST be either 32, 48, or 64 bytes.

[fdamato]

Addressed in #60