scrypt
A memory-hard password-based key derivation function (RFC 7914) whose cost parameter N, block size r and parallelization p set how much CPU time and memory each guess costs. OWASP recommends it when Argon2id is unavailable.
- Defined in
- RFC 7914
Covered in
Password storage: hashing parameters and rehash on login
Choose Argon2id, scrypt, PBKDF2 or bcrypt with current minimum parameters, store a versioned hash, and upgrade old hashes after a successful login without overwriting a reset.
Choose cryptographic algorithms and parameters by job
A sourced quick reference for October 2026: which algorithm and parameters to use for encryption, hashing, passwords, MACs, signatures, key agreement, key derivation, randomness and TLS, the matching APIs in Node.js, Python, Java, Go and .NET, and where post-quantum migration stands.
Practice: Insecure randomness lab: Generate unguessable API keys · Password hashing lab: Verify and upgrade an Argon2 password hash on login