Simply add the NonceSizeX constant, and accept 24 bytes nonces in NewUnauthenticatedCipher. Based on draft-irtf-cfrg-xchacha-01 and libsodium's implementation. Fixes golang/go#24485 Change-Id: I551c8ace258bd54b95bb204c8bb34bccd1c4b615 Reviewed-on: https://go-review.googlesource.com/c/crypto/+/185991 Reviewed-by: Michael Munday <mike.munday@ibm.com>