Thankyou. This is very interesting. Whenever I study cryptography I feel a bit like Alice going down the rabbit hole.

Thank god the safe best-practices are clear and simple in the majority of cases.

EDIT: in case anyone reading this is wondering, the safe best-practice is to USE BCRYPT.

http://codahale.com/how-to-safely-store-a-password/