I would suggest wrapping polarssl's md5 functionality around a function in Common, just in case we ever decide to drop the polarssl requirement and/or figure that its md5 functionality doesn't suffice our needs for whatever reason.

Not sure how others feel about this, though.