Are there any established hashing functions that allow for a backdoor? Scrypt and bcrypt don't allow it, and I might not trust Makwa.
@otus I would do Encrypt(password+salt) with a deterministic algorithm.
@otus The purpose is to be able to still get the password, but if the bad guys hack the server, they won't have the passwords.
@PaŭloEbermann why not? If I use the same salt (all same inputs), the output should be the same. (Assuming you don't include the time of encryption/random value)