Use `CRYPT_BLOWFISH` as preferred hash algorithm (see #5853)

This effectively raises the minimum PHP version to 5.3.7, because the Blowfish modes that deal with potential high-bit attacks have only been added in this version.