will generate the same derived key bytes (codice_7). these derived key collisions do not represent a security vulnerability – as one still must know the original password in order to generate the "hash" of the password.