Given the known weaknesses of MD5 and the recent (May 2009) weaknesses discussed in SHA1, how should new programs be salting & hashing their passwords?
I\'ve see
Use a slow function like bcrypt. Here is a post from the Phusion guys.