I thought the first one was solved at least 3 different ways over now, and that ...

tptacek · on March 7, 2013

That still really is the answer for password hashes.

The right ordering is scrypt, bcrypt, PBKDF2, but even if you choose PBKDF2 you're still worlds better than salted hashes.

It makes sense for NaCL/Sodium to just pick one, though, and it makes sense for the choice to come from the hash contest.

jedisct1 · on March 7, 2013

See this excellent presentation by Solar Designer on this very topic: http://www.openwall.com/presentations/Passwords12-The-Future...