2 hours ago
Your two hashes appear to be:
d3452821155680b012da42b4fe11a90981a81aae
and
03452821155680b012da42b4fe11a90981a81aae
As you can tell, the only difference is that the first character is different. Because we only test 128 bits, and it happens that the first block is not part of that 128 bit window, we consider these to be the "same" hash. The chances of 2 SHA1 hashes sharing 128 bits (or in this case far more) and both being passwords within the same list are so incredibly small that we consider this behavior to be acceptable. If for some reason this were to happen in the real world, we could work around it, but this is extremely unlikely to cause problems in real world usage and it would be a pretty big deal if this were ever to happen.
d3452821155680b012da42b4fe11a90981a81aae
and
03452821155680b012da42b4fe11a90981a81aae
As you can tell, the only difference is that the first character is different. Because we only test 128 bits, and it happens that the first block is not part of that 128 bit window, we consider these to be the "same" hash. The chances of 2 SHA1 hashes sharing 128 bits (or in this case far more) and both being passwords within the same list are so incredibly small that we consider this behavior to be acceptable. If for some reason this were to happen in the real world, we could work around it, but this is extremely unlikely to cause problems in real world usage and it would be a pretty big deal if this were ever to happen.