LS,
the sourcecode of a md5 collision generator has been released,
it takes about 45 minutes to generate.
..so to an "eve" with this knowledge md5 is almost the same as plain text..
maybe its not bad to include eg. sha2 hashes into the options for passwords
kr,
Wim Bertels