title: Cisco IOS password types - relative security
body: <p>Cisco has finally gotten around to offering two relatively modern ways to store passwords in configuration files:</p>
  
  <ul>
  <li>PBKDF2-HMAC-SHA256 with 20,000 iterations</li>
  <li>Scrypt with N=16384, r=1, p=1 </li>
  </ul>
  
  <p>My question for the security gods is, given the two algorithms above: is one clearly better then the other, are they about the same, or are there any obvious tradeoff's that make it a hard decision?</p>