Diverging from your main point a bit: 2MH/s is unrealistically low. For a couple...

		rphlx on June 10, 2012 \| parent \| context \| favorite \| on: Lessons learned from cracking 2 million LinkedIn p... Diverging from your main point a bit: 2MH/s is unrealistically low. For a couple thousand dollars you can build FPGA HW that can do several billion SHA1 hashes/s. The bitcoin mining world is getting 400-450 SHA256 MH/s from a $130 chip. With similar technology, you can brute force a 2^44 SHA1 space in a lot less than 50 days.

Which is why no-one should be storing passwords in SHA1.