The bit length of the nonce.
Source(s):
NIST SP 800-38C
under Nlen
The byte length of the RSA modulus n. (Note that in FIPS 186, nlen refers to the bit length of n.)
Source(s):
NIST SP 800-56B Rev. 2