https://bolesblogs.com/2005/12/11/hardening-passwords/