AES Nonce/IV Generator

Generate unique 12-byte (96-bit) nonces for use with AES-GCM encryption. AES-GCM requires a unique nonce for each encryption with the same key - reusing a nonce completely breaks security. This tool generates nonces using the browser's CSPRNG and displays them in hex format.

Privacy: this tool processes your data entirely in your browser. Nothing you paste or type is sent to the server.

Generate multiple nonces at once.

Result

Enter your values and press Calculate — the result appears here.

Worked examples

Generate a nonce

  • count = 1

Result: A 24-character hex string (12 bytes).

Frequently asked questions

Why is nonce uniqueness critical?

AES-GCM's security completely breaks if you reuse a nonce with the same key. An attacker can recover the plaintext and forge messages. Never reuse a nonce - generate a fresh one for every encryption.

What nonce size does AES-GCM require?

AES-GCM requires a 96-bit (12-byte) nonce. This tool generates exactly 12 bytes. Other sizes are technically possible but reduce security and are not recommended.

Can I use a sequential nonce?

For AES-GCM, sequential nonces are acceptable IF you never encrypt more than 2^32 messages with the same key. However, random nonces are safer - they require no state management. This tool generates random nonces.

Should I store the nonce with the ciphertext?

Yes. The nonce is not secret - it can be stored alongside the ciphertext. You need it for decryption. Only the key must remain secret.

💬 Discuss on BestWordz Community

Join the conversation about Cybersecurity, aes nonce generator, aes iv on the BestWordz Community forum.

Visit Forum →
Copied!