PSA_KEY_TYPE_CHACHA20 macro

For ChaCha20 and ChaCha20_Poly1305, Mbed TLS only supports 12-byte nonces. For ChaCha20, the initial counter value is 0. To encrypt or decrypt with the initial counter value 1, you can process and discard a 64-byte block before the real data.