Use a character buffer for nonces, not raw strings