We really should leave MD5 behind, it's broken: http://en.wikipedia.org/wiki/Hash_function_security_summary

I believe most people are moving to SHA256 these days, we should probably use that. (And this requires little change on your part, maybe an extra module on ours.)