Embedded chacha: Add 0-bit iv + 128-bit counter mode

This mode might be suitable for a Fortuna keystream primitive.

Reviewed by: markm
Sponsored by: Dell EMC Isilon
Differential Revision: https://reviews.freebsd.org/D19410