Benlog » Don’t Hash Secrets
http://benlog.com/articles/2008/06/19/dont-hash-secrets
"So the next time you’re using a hash function on anything, ask yourself: is any of the stuff I’m hashing supposed to stay secret? If so, don’t hash. Instead, use HMAC."