Change Crypto Spec in accordance to bettercrypto.org

The current puppet crypto spec is 5yrs old (talked to the original author). I've adapted it to something sane and have taken the current recommendations for it by the bettercrypto(.org) project.