Switch to pycryptodome

This should close #971289. But it needs testing, and for that it requires to use an upstream tarball that include the tests; see [1].

[1] !1 (merged)