3 ms·

Maybe it should. Discarding the rest of the bytes works fine for passwords, though. I guess that's just not sufficient.

• pclmulqdq 2y ago
  In my book, discarding entropy is a generally dumb thing to do. Passwords are usually under 72 chars, but a lot of people use concatenations of usernames and passwords in their hash to get guaranteed domain separation between users.