djb's ChaCha from https://boringssl.googlesource.com/boringssl/