title: Password Hashing: PBKDF2 (using sha512 x 1000) vs Bcrypt
body: <p>I've been reading about the Gawker incident and several articles have cropped up regarding only using <a href="http://en.wikipedia.org/wiki/Bcrypt" rel="noreferrer">bcrypt</a> to hash passwords and I want to make sure my hashing mechanism is secure enough to avoid switching to another method. In my current application I have opted for a <a href="http://en.wikipedia.org/wiki/PBKDF2" rel="noreferrer">PBKDF2</a> implementation utilising sha2-512 and a minimum of 1000 iterations.</p>
  
  <p>Can I ask for opinions on using PBKDF2 vs Bcrypt and whether or not I should implement a change?</p>