MD5 is not a good enough hash function for passwords.
Really, raither than trying to re-invent some half-arsed security, this other system needs to implement LTI, which has a properly reviewed secuirty design.
Really, raither than trying to re-invent some half-arsed security, this other system needs to implement LTI, which has a properly reviewed secuirty design.
(Sorry, I realise this is not a helpful answer.)