Quick buffer, I know very little about encryption methods and how they are implemented, I just know a little on the quality and importance of a good versus bad encryption method. My understanding is that Magento CE uses the very weak MD5 encryption method, which is widely known for being lackluster and should cease even being used. Magento EE however uses SHA-256 which is know as a much stronger alternative.
As a two pronged question, is Magentos' thoughts on keeping CE using MD5 strictly a business decision to push vendors to EE for a stronger method?
And how hard would it be to upgrade the current method of CE from MD5 to say SHA-256 ourselves without Magento needing to implement the change for us?