Secure password hashing with bCrypt

Comparing #2 with #3

Content

[...]
$key = uniqid($this->prefix, true);

// 12 rounds of HMAC must be reproduced / created verbatim, no known shortcuts.
// Salsa20 returns more than enough bytes.
for($i = 0; $i < 12; $i++) {
$bytes = hash_hmac('s
alsa20ha512', microtime() . $bytes, $key, true);
usleep(10);
}
}
return $bytes;
}
[...]