Implementation copied from 32db794688/chacha20poly1305/xchacha20poly1305.go
32db794688/chacha20poly1305/xchacha20poly1305.go