Why bcrypt Can Be Unsafe for Password Hashing ?