Is it just me, or are they successfully killing a strawman in this article? Who the hell uses js cryptography for such things?
(http://users.guardian.co.uk/signin/0,12930,-1,00.html)
This website claims it's their script: (http://pajhome.org.uk/crypt/md5/)