I read that (key, nonce) pair should be used only once for encryption of a message. My question is how confidentiality can be lost if two peers using a shared key use same (key, nonce) pair to encrypt their own messages (messages of peers would be different).
$\begingroup$
$\endgroup$
2
-
1$\begingroup$ If you reuse a (key,nonce) pair with a stream cipher (like ChaCha) you leak the XOR of the encrypted messages. $\endgroup$– SEJPMJul 23, 2018 at 9:38
-
$\begingroup$ Using the same (key, nonce) in a streamcipher means you're getting the same key stream. Breaking those is equivalent to breaking a one-time-pad with key reuse. $\endgroup$– CodesInChaosJul 23, 2018 at 10:23
Add a comment
|