nonce is 8 bytes, not 4