Very simple nonce generation

We start with a twenty-byte counter initialised to 0 (on the client) or
1 (on the server) followed by four random bytes.