I wrote an extension similar to this at http://gregstoll.dyndns.org/~gregstoll/passwordhash/ but for some reason I'm hesitant about changing over to this scheme.