(Still needs to be tested against the original using sample passwords
of different length.)