ed25519_open(): check that S < l
Not strictly required, but I don't see any downsides either.
Support overlapping input and output regions in crypto_secretbox_detached()
crypto_stream_salsa20() doesn't support overlapping input and output regions,
except when they are aliases.