added scrypt as optional key stretching algo in case we're worried about asic/fpga brute force attacks