If it is feasible to locate a shorter password which hashes to the same benefit as an extended password, the hashing algorithm is broken. $endgroup$It ought to be CPU-hea