The decrypt() function for crypto_box (public-key) used crypto_secretbox_NONCEBYTES and crypto_secretbox_MACBYTES (secret-key constants) instead of crypto_box_* constants. These happen to be equal in libsodium but are semantically different APIs. Fix ensures consistency with the encrypt() counterpart.