We know reusing IV can compromise our secrecy. here are myI have some questions:
1-is that OK aiming to useclarify the same key for encrypting plain-texts in authenticated encryption (GCM), or confidential only encryption (CTR), if we use random IV to encrypt each plain-text? and how many time we can reuse same key to encrypt plain-text ?
2-What's different between IV and nonce in CTR or GCM mode? (i know there is a counter nonce 001 002 003 ... but there is a random IV before counter to encrypt each block and some experts in comments are saying we have no IV in CTR or GCM mode? from Wikipedia article i thought the right word is IV+counter instead of saying nonce or am i wrong?)
3-What is the right way to generate an IV (first half of nonce) to encrypt plain-text/Nonce in CTR or GCM modes ? should we use TRNG or CSPRNG? (in comments experts are saying we shouldn't choose nonce (first half) randomly! why ?)/GCM:
Is it OK to use the same key for encrypting plain-texts in authenticated encryption (GCM) and confidential only encryption (CTR) if we use a random IV to encrypt each plain-text? How many time we can reuse the same key in this way?
What's different between "IV" and "nonce" in CTR or GCM mode? (I know there is a counter within the algorithm, but there is some IV before the counter to encrypt each block. From Wikipedia, I thought the correct term was IV+counter instead of saying nonce?)
What is the right way to generate the IV for CTR or GCM modes? Should we use a TRNG or CSPRNG? Some comments imply the nonce shouldn't be random - why is this?