AEAD construction extending ChaCha20-Poly1305 with a 192-bit nonce via HChaCha20 for safer random nonce use, common in secure messaging and wallets.