@dtm609 @ryancdotorg @Zaeyx @CarbonDifoxide @CiPHPerCoder For memory (Argon2 or scrypt) with auth ≲100 ms they are not as anti-GPU as bcrypt, but at ≳1000 ms they are better than bcrypt. PBKDF2-SHA512 is always 40x worse than bcrypt (PBKDF2-SHA256 is 80x worse).

For memory (Argon2 or scrypt) with auth ≲100 ms they are not as anti-GPU as bcrypt, but at ≳1000 ms they are better than bcrypt. PBKDF2-SHA512 is always 40x worse than bcrypt (PBKDF2-SHA256 is 80x worse).