Requirement on cryptography should reflect what is in the toolchain

We currently state a dependency on cryptography 1.7.2 exactly in our requirements file, but the new toolchain only offers 2.0+. As a result, we try to build 1.7.2 but it doesn't work. Instead if trying to fix that, just upgrade the affected branches to want cryptography >= 2.0.