As far as I understand, nonces must not be reused because their reuse allows public key encryption to be broken.
If I use NaCl's
crypto_box http://nacl.cr.yp.to/box.html to encrypt two different plaintexts with the same secret key and nonce, can an observer of these messages recover the secret key and nonce?
If so, how?
P.S. Sorry, tagged as
libsodium as there wasn't an