very surprised nobody here or the author mentions Argon2, which is like scrypt except better, and is hardened against GPU attacks.

https://en.wikipedia.org/wiki/Argon2