BigDaddyLoveHandles wrote: MD5? That's ****. Use SHA-2. Although MD5 is considered 'broken', the break manifests itself in that it is possible to construct two values with the same MD5. This is not the same as taking an MD5 hash and constructing a value that will transform to the MD5. Like all security considerations, the algorithm to use depends only on the ...