One very large appeal of bcrypt is its memory usage characteristics. SHA1 is easily done on GPUs, and can be massively parallel with very little work. Simply re

One very large appeal of bcrypt is its memory usage characteristics. SHA1 is easily done on GPUs, and can be massively parallel with very little work. Simply rehashing doesn't adequately replicate the barriers that bcrypt puts in place to brute-forcing. See: http://crypto.stackexchange.com/questions/400/why-cant-one-implement-bcrypt-in-cuda http://crypto.stackexchange.com/questions/400/why-cant-one-i...