Re: @jfdidave
I've just realised how trivial cracking a password stored as hashed pairs would be:
Cracking any pair by brute force is a search for a two character password.(64*64 iterations?)
Once you have at least one letter, cracking every other pair is reduced to a brute force search for a single missing character.
And if you didn't salt each pair separately, and the password contains a duplicated character, then cracking is reduced to a brute force search for a single character.
Storing hashed pairs of characters offers NO security.
Biting the hand that feeds IT
