fixed length of the password's hash field