php callback
allow 32-char long nonces