True. The real problem is if you use a hash that's not designed for protecting passwords and can be computed at a rate of millions/billions per second on commod

True. The real problem is if you use a hash that's not designed for protecting passwords and can be computed at a rate of millions/billions per second on commodity hardware - versus s-crypt & friends which should only allow for 10s-100s guesses per second on the same hardware.