If it is feasible to find a shorter password which hashes to the same value as an extended password, the hashing algorithm is damaged. $endgroup$