The entropy in the resulting hash is almost the same as a salted MD5 though, is it not? You have more bits, but not significantly more possible hashes.<p>edit: I guess most people only start out with short passwords, thus limiting the possible entropy anyway...