$begingroup$ Indeed, all hash capabilities do produce output of a set duration, whatever the size with the input. This does indicate that there's a theoretical possibility of collisions — two distinctive inputs creating the same hash.It should be CPU-heavy to make brute force attacks tougher/unattainable, in case your databases would be leaked.Th