Is this true? PBKDF2 is designed to be slow and AIUI bcrypt is vulnerable to the same kind of high performance dedicated hardware attacks that PBKDF2 is with only marginally higher cost these days.