A key derivation function based on scrypt with additional features, some optional, that make it even more expensive to compute.

Now used by Debian by default.