[rplnt]

Bad thing is that you can't really use hashing function that takes quarter a second to complete in service with many(many!) users.

[thirsteh]

Of course you can. You only need it for the initial login.