[eluser]jedd[/eluser]
I'd really like to ask my question again, but it might come across as though I'm taking the piss. Oh, bugger it.
Who has access to your hashed password list?
If your site allows people to hit a few million dictionary attacks an hour, then here's a clue - your problem is not the password encryption algorithm.
If you allow visibility of your password column in your table - your problem is not .. (etc).
