Like with any puzzle design. You can make any puzzle easily very difficult (by adding multiple steps, red herrings, ...). It's much more difficult to make it difficult _and_ rewarding. Make the puzzle solver only have to use knowledge acquired while examining the challenge and don't make them guess, and don't overflow them with information. Finally, test your challenges on your teammates.