https://security.stackexchange.com/questions/211/how-to-secu... a good write up here too of the underlying hashing implementations.