Introduce ability to specify the KDF to use.

Using the new -P option, one can specify the KDF function to use with
the password. Currently the now default sha1 and the newly available
sha512 arguments are valid with the -P option.

kc_setup_crypt() got a new parameter: char *kdf
Adjust every call to kc_setup_crypt() accordingly.

Extend man page accordingly.