> First: scrypt (http://www.tarsnap.com/scrypt/) is far better than bcrypt.

Is there any independent analysis on scrypt? Only paper on scrypt I've seen comes from Colin. That's not meant as an attack; I'm interested in learning more, but can't find anything else.