FreeBSD MD5 is pretty strong— Its randomly salted and runs 1000 iterations of MD5. None of MD5's weaknesses are especially relevant in this context. The most

FreeBSD MD5 is pretty strong— Its randomly salted and runs 1000 iterations of MD5. None of MD5's weaknesses are especially relevant in this context. The most important thing is the how slow it is, and it's likely that if they'd taken defaults bcrypt would actually have been faster. The saddest thing is that many of the people howling about MD5 are proposing weaker alternatives like straight SHA-512 with a static "salt" embedded in the source code. In fact, MTGOX almost deployed such a replacement in their upgrade until they were cluesticked by people screaming to not invent you own cryptographic functions.