PBKDF2 for password hashing, RNG crypto for password salt