progs/cc-kem.c: Reimplement the `naclbox' bulk cipher in terms of AEAD.