If it is possible to find a shorter password which hashes into the same value as an extended password, the hashing algorithm is damaged. $endgroup$It ought to be CPU-weig