As far as I understand, nonces must not be reused because their reuse allows public key encryption to be broken.
If I use NaCl's crypto_box
http://nacl.cr.yp.to/box.html to encrypt two different plaintexts with the same secret key and nonce, can an observer of these messages recover the secret key and nonce?
If so, how?
P.S. Sorry, tagged as libsodium
as there wasn't an NaCl
tag.