Oddbean new post about | logout
 argon2 won a security competition when research in this field was rapidly changing, and subsequently at least the several cryptographers I talked to said it wouldn't win it again if it was run again, that the original scrypt (tarsnap by perceival) was actually better.  That is why I chose it for ncryptsec over argon2.

Tiny tiny nitpick, either would work very well.