Stop what you're doing, and just [use bcrypt](http://codahale.com/how-to-safely-store-a-password/ http://codahale.com/how-to-safely-store-a-password/). The fac

Stop what you're doing, and just [use bcrypt](http://codahale.com/how-to-safely-store-a-password/ http://codahale.com/how-to-safely-store-a-password/). The fact that you've gotten it wrong already (when you probably thought you knew what you were doing) should be a strong wakeup call. There's always an attack you didn't know about or a countermeasure you didn't think of.