> If they describe how passwords were hashed, it would make it easier for hackers to crack them. I don't really agree with you. If you store bcrypted stuff, y

> If they describe how passwords were hashed, it would make it easier for hackers to crack them. I don't really agree with you. If you store bcrypted stuff, you see $2a${integer exponent}$hash. If you store SHA1'ed stuff, you see characteristic hashes and can trivially test against known hashes. So on for MD5, etc. I don't need you to tell me "we store SHA1'ed stuff iterated 35 times with the following salt", but keeping that information secret wouldn't usually help you anyway. A determined attacker will test and iterate until they've figured out your scheme (or, if you're unlucky, they won't need to). Telling the attacker "we bcrypted everything" doesn't tell them anything they couldn't plainly see on their own.