grand-parent's point is presumably that bcrypt (or similar) is a better choice than md5.