RandomNonceBox now reports primitive used too

Also, specs updated to use TestVectors
Remove Ciphertext

It's breaking the 1.0 API.  That's the price of rushing for 1.0, I
guess.