3 ms·

Apologies. I'm an idiot who can't read a question :-) bcrypting the md5s sounds like a good approach.