So, for the encryption I could use 'MD5' (what is md5?), and a session ID system..
The session ID would be like the 'key', and I need it to decrypt the password on the server side, right?
I know there is an apache module that takes care of the session ID thing.