By default AuthComponent uses the hash function of the core utility class Security to hash passwords. But you can also configure it to use your own hashing logic if needed by setting authenticate to an object of a class which contains a function named hashPasswords. This function would basically replicate the functionality of the component's hashPasswords function using your custom hashing logic. Check the api and maybe the code for the function itself for more info on how it works.