title: Spring's BCrypt implementation
body: <p>I'm trying to use <a href="http://docs.spring.io/autorepo/docs/spring-security/3.1.7.RELEASE/apidocs/org/springframework/security/crypto/bcrypt/BCrypt.html" rel="nofollow">Spring's BCrypt implementation</a>.  I noticed the <code>checkpw()</code> method takes 2 arguments: the plaintext password and the hash.  How is the method able to verify this without the salt being included?</p>