Switch to cryptobox/gocryptobox imports.
More robust error handling for br types.

This change prevents bad record lengths from panicking. Discovered
on Linux/i386. On amd64, the lengths were probably 64-bit, which meant
that a tampered record length would almost never be < 0.