Please don't use hashes for this. Use bcrypt (http://en.wikipedia.org/wiki/Bcrypt). Hashes are designed to be easy to compute, bcrypt is adaptive in the sense that it can be made harder to compute over time, so it's a lot harder to brute force. It also adds a salt by default.