Why do you need this level of security? What are you protecting? My view is don't bother with this unless you really have something worth protecting. To be quiet honest if your siteis comprimised to this extent do you really think someone would both trying to crack a hashed password so they can log in to the site in the conventional fashion? They already have free rein to do as they please, why would they bother?