Cryptographic Right Answers
> Password handling (Was: scrypt or PBKDF2): In order of preference, use scrypt, bcrypt, and then if nothing else is available PBKDF2.<p>What's the reason to prefer scrypt over bcrypt?  And, what's the reason to prefer both over PBKDF2?  (Asking because I see quite a few bits of software that use PBKDF2.)<p>> Asymmetric signatures (Was: Use RSASSA-PSS with SHA256 then MGF1+SHA256 yabble babble): Use Nacl, Ed25519, or RFC6979.<p>Could you make a recommendation for or against using GPG, since that's by far the most common approach for asymmetric signatures?  (Obviously such a recommendation would need to point at specific key/algorithm choices to use or avoid.)<p>> Client-server application security (Was: ship RSA keys and do custom RSA protocol) Use TLS.<p>Using which of the many TLS implementations?