+1for bcrypt.
@josemorb, but I have to raise my pointing finger a little bit.
Best password hashing methods consume much memory and much CPU time and are bad at using multiple CPU cores. Because, you know crime people use graphic cards which have a lot of processing power, but a relatively low memory (compared to desktop machines with slow CPU but huge RAM) stack and each graphic processor has hundreds of cores (shader units).
The request for no performance impact hashing passwords is equal to asking for no security.