> For password storage it is still secure Nope; doing a security demonstration recently, given a list of ~100 md5'ed passwords I'd brute-forced half of them in

> For password storage it is still secure Nope; doing a security demonstration recently, given a list of ~100 md5'ed passwords I'd brute-forced half of them in 15 minutes, with a lowest-end GPU doing the work. Salting would make it an order of magnitude harder, but that's still "not very hard at all".