Originally Posted By: chaosmagnet
Hashing algorithms are imperfect, and every one of them have "hash collisions."

It would not be good if these clients of yours are still using MD5 for their passwords since it has well known collision problems. I thought more recent hash functions like the SHA-2 class of hash functions basically eliminated collisions.