I guess the main problem is that encryption is foreign to most of us (myself included). It's hard to understand what is safe from what isn't. It's also very ha

I guess the main problem is that encryption is foreign to most of us (myself included). It's hard to understand what is safe from what isn't. It's also very hard to figure out if your encryption is bugged or not. I guess that for most us, once your method returns a hash, you expect that everything is secure. On a side note, I wonder how many people on HN would claim to know the inside out of encryptions. (Not the difference between SHA1/MD5/bcrypt but the actual math behind derivations and how they work)