3 ms·

Switching encryption schemes is rare. Why not just force a password reset on all users at that time?