Ah, that explains why I saw various catalán sites being pinned on the IPFS pinning service I run (https://www.eternum.io), which also runs a public writable gateway (so you can access IPFS files, including the banned catalán websites, through it).

Having just gotten back from Barcelona, I have to say that the way the Spanish government is handling this is far from ideal. I don't very much support the Catalonian plea for independence (I haven't heard any good reasons other than "but our freedom"), but blocking sites seems... suboptimal.

As for the crypto itself, why not use bcrypt? Your users don't care if it takes three seconds, but it makes attacks entirely infeasible.