[jolynch]

>> or even just a high number of rounds of SHA-512

> Please god no :-)

Heh I didn't mean it as a recommendation per say, but I'm pretty sure Linux uses repeated SHA-512 on at least some common distros. At least on my Ubuntu Focal machine my /etc/shadow appears to be using SHA-512.