ircmaxell/PHP-CryptLib — pull request #1 by ezimuel (2012-06-26 17:34:53+00:00)
Title: Fix for the security flaw in CRYPT_BLOWFISH

I added a security fix for the CRYPT_BLOWFISH issue with PHP < 5.3.7, info here: http://php.net/security/crypt_blowfish.php.
My proposal throw an exception in the create() method of CryptLib\Password\Implementation\Blowfish if the password contains 8-bit character with PHP < 5.3.7.
For PHP 5.3.7+ the prefix used in the crypt has been changed in $2y$ instead of $2a$ (that is still valid). The usage of $2y$ is recommended because it means that the hash value has been generated correctly.