Other memory-hard KDFs Aside from some historical ones and bcrypt (which did not use more than a few KB), there appears to be only slothKdf (and its zen32 component) by Elias Yarrkov Only released as part of dhbitty program, may change Not peer-reviewed Uses the memory bus poorly (32-bit random accesses) Provides advantage to attackers with custom hardware Bumps into the memory bandwidth A revision of zen32 with cache line sized accesses may use more RAM than scrypt (same duration)