crypto_stream() doesn't allow overlaps when c < m