What would you choose between:
- PBKDF2 SHA256 (270,000 iterations)
- bcrypt (12, 13 or 14 cost: 1-2 seconds)
- scrypt: I don't know if my hosting will allow it
I have to choose an algorithm to store passwords in a MySQL DB.
I've just read that bcrypt isn't so secure, PBKDF2 is more tested (but it could be reasonably faster on GPU/FPGA), scrypt is too new (and not tested enough) but is almost unbreakable.
So, please give me advice (in regards a sensible data website) and explain me what is better and why.