Hold the phone. Using MD5 upfront opens you up to a significantly increased collision probability. That has to degrade the security here.