> I doubt that MS is doing password hashing wrong They have a long and storied history of doing just that. You can get a flavour from http://en.wikipedia.org/

> I doubt that MS is doing password hashing wrong They have a long and storied history of doing just that. You can get a flavour from http://en.wikipedia.org/wiki/NTLM http://en.wikipedia.org/wiki/NTLM Their hashing is most likely something defined to produce two parts from two 8 character chunks.