In CTR mode, an application reuses the same nonce and key for two different messages. Explain what an attacker who intercepts both ciphertexts can deduce from them, and why.
