Nice implementation, but please don't recommend using email addresses as the base - or if you do, emphasize to use a strong application-specific salt with them. Similar to Gravatars, those could be a privacy leak otherwise.