»And that is the current state of the art in password protection.« It is not really state of the art; storing passwords in plain text or hashing them are just by far the most common solutions. I think something like the Secure Remote Password protocol [1] deserves the label state of the art much more although it is not widely deployed.

[1] http://en.wikipedia.org/wiki/Secure_Remote_Password_protocol