Cryptographic Right Answers
> Password handling (Was: scrypt or PBKDF2): In order of preference, use scrypt, bcrypt, and then if nothing else is available PBKDF2.What's the reason to prefer scrypt over bcrypt?  And, what's the reason to prefer both over PBKDF2?  (Asking because I see quite a few bits of software that use PBKDF2.)> Asymmetric signatures (Was: Use RSASSA-PSS with SHA256 then MGF1+SHA256 yabble babble): Use Nacl, Ed25519, or RFC6979.Could you make a recommendation for or against using GPG, since that's by far the most common approach for asymmetric signatures?  (Obviously such a recommendation would need to point at specific key/algorithm choices to use or avoid.)> Client-server application security (Was: ship RSA keys and do custom RSA protocol) Use TLS.Using which of the many TLS implementations?