adjust KDF preference to VeraCrypt order
RIPEMD160 is not even allowed any more as an option when creating an encrypted file container using VeraCrypt. when encryption the system partition/drive, it is below SHA256 in the list of options.
the order is like that since VeraCrypt version 1.0f (2014-12-30, see https://www.veracrypt.fr/en/Release%20Notes.html).