Look into SRP+scrypt

Quite a few suggestions from IFF:

  • SPAKE2
  • HPAKE ( Boyen++ )
  • Key stretching
  • Firefox Sync SRP Protocol
  • Magic Wormhole
  • VOPBFs