I read that (key, nonce) pair should be used only once for encryption of a message. My question is how confidentiality can be lost if two peers using a shared key use same (key, nonce) pair to encrypt their own messages (messages of peers would be different).

  • 1
    $\begingroup$ If you reuse a (key,nonce) pair with a stream cipher (like ChaCha) you leak the XOR of the encrypted messages. $\endgroup$
    – SEJPM
    Commented Jul 23, 2018 at 9:38
  • $\begingroup$ Using the same (key, nonce) in a streamcipher means you're getting the same key stream. Breaking those is equivalent to breaking a one-time-pad with key reuse. $\endgroup$ Commented Jul 23, 2018 at 10:23


Browse other questions tagged or ask your own question.