net-md5/sha1: fixed salt length bug, and removed a FIXME comment