if password_requires_rotation() p1, p2 = split_in_half(password) fail unless p1 == p2 verify(p1, ciphertext) else verify(password, ciphertext)