We need graphs of "minimum password length" versus "number of CPUs in your shared hosting" :D

lol, indeed. However I would prefer something with less load impact than bcrypt hashing. Or is that yak shaving?