For example, Chacha20 expects a 16 byte IV+nonce but is a stream cipher with
an effective input block size of a single byte.
This change is the bare minimum; some inefficiencies remain in
cryptosoft.c. I plan to address those once there is a cipher to test
them against.