> Is that specifically to inconvenience someone who would break in, steal your password list, and crack it offline? Probably: http://codahale.com/how-to-safely

> Is that specifically to inconvenience someone who would break in, steal your password list, and crack it offline? Probably: http://codahale.com/how-to-safely-store-a-password/ http://codahale.com/how-to-safely-store-a-password/ Hashing functions designed for speed are absolutely the wrong thing for passwords.