And look, my first cryptographic failure!

(The chacha implementation never actually advanced the counter, so
it would repeat the same block 64 times, then used another key.)

On the bright side, dieharder passes now.  But that's not real
testing, of course.