Password hash settings

Choose

Customers sign in at 20 logins/s, and at 60 logins/s from 0:10, on one auth box with 2 vCPU and 4 GB. A thief has a copy of the password table. Pick the hash settings. Keep login p99 under 500 ms. One attacker core may test at most 100 guesses/s.