NonceGenerator now uses RNGCryptoServiceProvider