zendframework/zf2 — pull request #5587 by ezimuel (2013-12-05 16:23:14+00:00)
Title: Changed the default cost of bcrypt to 10

I changed the default cost of bcrypt to 10 according to prevent potential DOS attacks due to the high computational time of the previous cost value of 14. The security is not compromised with a value of 10, that is the same default value used by password_hash() of PHP 5.5.
See this article for more info about potential DOS attacks on bcrypt: http://timoh6.github.io/2013/11/26/Aggressive-password-stretching.html