Port to the latest crypto-api

Restrict version numbers on cryptohash as well, because things we rely
on are deprecated.