The bit length of the nonce.
Sources:
NIST SP 800-38C
under Nlen
The byte length of the RSA modulus n. (Note that in FIPS 186, nlen refers to the bit length of n.)
Sources:
NIST SP 800-56B Rev. 2