Oups, my mistake. I thought that md5 was used by default by the new API (I made a quick read) but you are all right ! Tiredness can be deceptive... But it's still a good website where I learned to make secure password hashing for the first time.