diff --git a/docs/secret.rst b/docs/secret.rst index ed661f057276ba6b207f2fb3ef588297b27be2c3..14c5f3a7ad2b15607a2373afed626dc8f758e5b1 100644 --- a/docs/secret.rst +++ b/docs/secret.rst @@ -56,12 +56,12 @@ decrypt the data, or encrypt new data. Nonce ~~~~~ -The 24 bytes nonce (Number used once) given to :meth:`~nacl.secret.SecretBox.encrypt` -and :meth:`~nacl.secret.SecretBox.decrypt` must **NEVER** be reused for a -particular key. Reusing the nonce means an attacker will have enough information -to recover your secret key and encrypt or decrypt arbitrary messages. A nonce -is not considered secret and may be freely transmitted or stored in plaintext -alongside the ciphertext. +The 24 bytes nonce (`Number used once <https://en.wikipedia.org/wiki/Cryptographic_nonce>`_) +given to :meth:`~nacl.secret.SecretBox.encrypt` and :meth:`~nacl.secret.SecretBox.decrypt` +must **NEVER** be reused for a particular key. Reusing the nonce means an +attacker will have enough information to recover your secret key and encrypt or +decrypt arbitrary messages. A nonce is not considered secret and may be freely +transmitted or stored in plaintext alongside the ciphertext. A nonce does not need to be random, nor does the method of generating them need to be secret. A nonce could simply be a counter incremented with each message