I was surprised that so many people didn't have patience to think through the logic in that original post. Since there is a function used to derive the key from password, this must be the way Samsung handles the password. This logic doesn't fly.