Actually, after some googling, I've discovered a sequel to bcrypt: http://www.tarsnap.com/scrypt.html http://www.tarsnap.com/scrypt.html This algorithm is not

Actually, after some googling, I've discovered a sequel to bcrypt: http://www.tarsnap.com/scrypt.html http://www.tarsnap.com/scrypt.html This algorithm is not only provably computationally hard, but provably requires a lot of RAM. Since RAM, and the bandwidth thereof, (unlike password-cracking chips) is as cheap to the consumer as it is to the NSA, you can set your RAM requirements very high to give them a very hard time.