We should support phc password storage as described in OWASP Password Storage Cheat Sheet.