How used nonce in CTR Mode of AES-EAX Encryption?
I already figured it out myself. Lol
So, in paper "The EAX Mode of Operation" by M. Bellare, P. Rogaway, and D. Wagner explained that in CTR algorithm and i wasn't aware. The 128-bit auth nonce will be encrypt in ctr mode and concatenate with encrypted nonce+1 until encrypted nonce+m-1, which m is amount of block plaintext. And at last xor it with plaintext.