SHA512JS: Hash Locally
deckar01.github.io
deckar01.github.io
The idea is that hackers who obtain a server's hash do not expect the plaintext password to actually be a base64 encoded SHA512 hash. It also encourages salting to prevent password reuse.
What do you think?
Too much security?
Too time consuming?
Too awesome, must download GreaseMonkey script!
Also, by adding a new function into your password hashing have you changed the cryptographic properties of the composed function? Have you formally proved that these new properties are as strong as the uncomposed properties? No? Then don't do it.
DON'T ROLL YOUR OWN CRYPTO, PEOPLE!
Composing functions counts as rolling your own, btw.