Nonce verification