Noise.Crypto.Cipher.ChaChaPoly (Noise Protocol v0.3.0)

ChaCha20-Poly1305 cipher (spec §12.3): 96-bit little-endian nonce, 16-byte tag appended.